CVE-2013-2236
Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api...
CVE-2013-2236 is a low vulnerability (CVSS 2.6) in Quagga, published October 17, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.08%, the 81st percentile. Fixed in quagga 0.99.20.1-3.2.mga2.
- Severity
- 2.6 LowCVSS 2.0, NVD
- Exploit chance
- 2.08%EPSS, 81st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.99.20.1-3.2.mga2quagga +13 more
Description
Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
quaggaDebian:6.0 From an advisory covering 2 CVEs | before 0.99.20.1-0+squeeze5, plus listed versions 0.99.17-20.99.17-2+squeeze20.99.17-2+squeeze30.99.17-30.99.17-4 Show 12 moreShow less0.99.18-10.99.18-20.99.19-10.99.20-10.99.20-1~bpo60+10.99.20-20.99.20-30.99.20-40.99.20.1-0+squeeze10.99.20.1-0+squeeze20.99.20.1-0+squeeze30.99.20.1-0+squeeze4 | 0.99.20.1-0+squeeze5 |
quaggaDebian:7 From an advisory covering 2 CVEs | before 0.99.22.4-1+wheezy1, plus listed versions 0.99.21-4+wheezy10.99.21-4+wheezy20.99.22-10.99.22.1-10.99.22.1-20.99.22.4-1 | 0.99.22.4-1+wheezy1 |
quaggaMageia:2 | before 0.99.20.1-3.2.mga2 | 0.99.20.1-3.2.mga2 |
quaggaMageia:3 | before 0.99.20.1-9.1.mga3 | 0.99.20.1-9.1.mga3 |
quagga-contribRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:0.99.15-14.el6 | 0:0.99.15-14.el6 |
quagga-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:0.99.15-14.el6 | 0:0.99.15-14.el6 |
quagga-develRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:0.99.15-14.el6 | 0:0.99.15-14.el6 |
quaggaRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:0.99.15-14.el6 | 0:0.99.15-14.el6 |
quagga-contribRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs | before 0:0.99.15-14.el6 | 0:0.99.15-14.el6 |
quagga-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs | before 0:0.99.15-14.el6 | 0:0.99.15-14.el6 |
Show 4 moreShow less
| Package | Affected | Fixed |
|---|---|---|
quagga-develRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs | before 0:0.99.15-14.el6 | 0:0.99.15-14.el6 |
quaggaRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs | before 0:0.99.15-14.el6 | 0:0.99.15-14.el6 |
quaggaUbuntu:14.04:LTS From an advisory covering 2 CVEs | before 0.99.22.4-3ubuntu1.1, plus listed versions 0.99.22.1-20.99.22.4-10.99.22.4-20.99.22.4-30.99.22.4-3ubuntu1 | 0.99.22.4-3ubuntu1.1 |
quaggaopenSUSE:Tumbleweed From an advisory covering 6 CVEs | before 1.0.20160315-5.1 | 1.0.20160315-5.1 |
What each source reports
NVD Score used
Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.
- Record
CVE-2013-2236- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.
- Record
CVE-2013-2236- Updated
- 2026-11-02
EUVDEUVD-2013-2187No score
Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.
- Record
EUVD-2013-2187- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4pv9-4pjh-rpv5No score
Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api...
Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.
- Record
GHSA-4pv9-4pjh-rpv5- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVRHSA-2017:0794
Red Hat Security Advisory: quagga security and bug fix update
- Record
RHSA-2017:0794- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-13
OSVMGASA-2013-0310No score
Updated quagga packages fix CVE-2013-2236
Updated quagga packages fix security vulnerability:
Remotely exploitable buffer overflow in ospf_api.c and ospfclient.c when processing LSA messages in quagga before 0.99.22.2 (CVE-2013-2236).
Note: We have worked around this vulnerability by disabling the ospf_api and ospfclient features, which did not provide useful functionality.
- Record
MGASA-2013-0310- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10362-1No score
libospf0-1.0.20160315-5.1 on GA media
These are all security issues fixed in the libospf0-1.0.20160315-5.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10362-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-2236No score
Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.
- Record
UBUNTU-CVE-2013-2236- Updated
- 2026-11-02
OSVUSN-2941-1No score
quagga vulnerabilities
Kostya Kortchinsky discovered that Quagga incorrectly handled certain route data when configured with BGP peers enabled for VPNv4. A remote attacker could use this issue to cause Quagga to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-2342)
It was discovered that Quagga incorrectly handled messages with a large LSA when used in certain configurations. A remote attacker could use this issue to cause Quagga to crash, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS. (CVE-2013-2236)
- Record
USN-2941-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
rhn.redhat.com/errata/RHSA-2017-0794.html
securityfocus.com/bid/60955
nongnu.mirrors.hostinginnederland.nl//quagga/quagga-0.99.22.3.changelog.txt
git.savannah.gnu.org/gitweb?p=quagga.git%3Ba=commitdiff%3Bh=3f872fe60463a931c5c766dbf8c36870c0023e88
lists.quagga.net/pipermail/quagga-dev/2013-July/010622.html
debian.org/security/2013/dsa-2803
Show 48 moreShow less
seclists.org/oss-sec/2013/q3/24
ubuntu.com/usn/USN-2941-1
nvd.nist.gov/vuln/detail/CVE-2013-2236
github.com/advisories/GHSA-4pv9-4pjh-rpv5
advisories.mageia.org/MGASA-2013-0310.html
gentoo.org/security/en/glsa/glsa-201310-08.xml
bugs.mageia.org/show_bug.cgi?id=11433
access.redhat.com/errata/RHSA-2017:0794
bugzilla.redhat.com/show_bug.cgi?id=674862
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0794.json
cve.org/CVERecord?id=CVE-2013-2236
mirror.easyname.at/nongnu//quagga/quagga-1.0.20160309.changelog.txt
openwall.com/lists/oss-security/2016/04/27/7
ubuntu.com/security/CVE-2013-2236
suse.com/security/cve/CVE-2010-1674