Every CVE Search/ Get API key

CVE-2016-4049

The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when...

7.5 HighFix available

The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of service (assertion failure and daemon crash) via a large BGP packet.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

4.64%Up 2.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of service (assertion failure and daemon crash) via a large BGP packet.

Record
CVE-2016-4049
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of service (assertion failure and daemon crash) via a large BGP packet.

Record
CVE-2016-4049
Updated
2026-11-02
EUVDEUVD-2016-5052 No score

The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of service (assertion failure and daemon crash) via a large BGP packet.

Record
EUVD-2016-5052
Updated
2026-11-03
GitHub AdvisoriesGHSA-5crg-85w6-wxj6 7.5

The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when...

The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of service (assertion failure and daemon crash) via a large BGP packet.

Record
GHSA-5crg-85w6-wxj6
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-20
Updated
2026-11-02
OSVRHSA-2017:0794 6.5

Red Hat Security Advisory: quagga security and bug fix update

Record
RHSA-2017:0794
CVSS 3.0
6.5 MediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2016-4049 7.5

The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of service (assertion failure and daemon crash) via a large BGP packet.

Record
UBUNTU-CVE-2016-4049
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 5 moreShow less
OSVMGASA-2016-0165 No score

Updated quagga packages fix CVE-2016-4049

Updated quagga packages fix security vulnerability:

A denial of dervice vulnerability have been found in BGP daemon from Quagga routing software (bgpd): if the following conditions are satisfied:

  • regular dumping is enabled
  • bgpd instance has many BGP peers

then BGP message packets that are big enough cause bgpd to crash. The situation when the conditions above are satisfied is quite common. Moreover, it is easy to craft a packet which is much "bigger" than a typical packet, and hence such crafted packet can much more likely cause the crash (CVE-2016-4049).

Record
MGASA-2016-0165
Updated
2026-11-02
OSVopenSUSE-SU-2024:10362-1 No score

libospf0-1.0.20160315-5.1 on GA media

These are all security issues fixed in the libospf0-1.0.20160315-5.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10362-1
Updated
2026-11-02
OSVSUSE-SU-2016:1482-1 No score

Security update for quagga

This update for quagga fixes the following issue:

Security issue fixed:

  • CVE-2016-4049: Fix for a buffer overflow error in bgp_dump_routes_func. (bsc#977012)
Record
SUSE-SU-2016:1482-1
Updated
2026-11-02
OSVSUSE-SU-2016:1483-1 No score

Security update for quagga

This update for quagga fixes the following issue:

Security issue fixed:

  • CVE-2016-4049: Fix for a buffer overflow error in bgp_dump_routes_func. (bsc#977012)
Record
SUSE-SU-2016:1483-1
Updated
2026-11-02
OSVUSN-3102-1 No score

quagga vulnerabilities

It was discovered that Quagga incorrectly handled dumping data. A remote attacker could possibly use a large BGP packet to cause Quagga to crash, resulting in a denial of service. (CVE-2016-4049)

It was discovered that the Quagga package incorrectly set permissions on the configuration directory. A local user could use this issue to possibly obtain sensitive information. (CVE-2016-4036)

Record
USN-3102-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
quagga
Debian:7
 before 0.99.22.4-1+wheezy3, plus listed versions
0.99.21-4+wheezy10.99.21-4+wheezy20.99.22-10.99.22.1-10.99.22.1-20.99.22.4-10.99.22.4-1+wheezy10.99.22.4-1+wheezy2
0.99.22.4-1+wheezy3
quagga
Debian:8
 before 0.99.23.1-1+deb8u2, plus listed versions
0.99.23.1-10.99.23.1-1+deb8u1
0.99.23.1-1+deb8u2
quagga
Mageia:5
 before 0.99.22.4-4.2.mga5
0.99.22.4-4.2.mga5
quagga-contrib
Red Hat:enterprise_linux:6::server
 before 0:0.99.15-14.el6
0:0.99.15-14.el6
quagga-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:0.99.15-14.el6
0:0.99.15-14.el6
quagga-devel
Red Hat:enterprise_linux:6::server
 before 0:0.99.15-14.el6
0:0.99.15-14.el6
quagga
Red Hat:enterprise_linux:6::server
 before 0:0.99.15-14.el6
0:0.99.15-14.el6
quagga-contrib
Red Hat:enterprise_linux:6::workstation
 before 0:0.99.15-14.el6
0:0.99.15-14.el6
quagga-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:0.99.15-14.el6
0:0.99.15-14.el6
quagga-devel
Red Hat:enterprise_linux:6::workstation
 before 0:0.99.15-14.el6
0:0.99.15-14.el6
Show 13 moreShow less
Affected packages
PackageAffectedFixed
quagga
Red Hat:enterprise_linux:6::workstation
 before 0:0.99.15-14.el6
0:0.99.15-14.el6
quagga
SUSE:Linux Enterprise Software Development Kit 12
 before 0.99.22.1-12.1
0.99.22.1-12.1
quagga
SUSE:Linux Enterprise Software Development Kit 12 SP1
 before 0.99.22.1-12.1
0.99.22.1-12.1
quagga
SUSE:Linux Enterprise Server 12
 before 0.99.22.1-12.1
0.99.22.1-12.1
quagga
SUSE:Linux Enterprise Server for SAP Applications 12
 before 0.99.22.1-12.1
0.99.22.1-12.1
quagga
SUSE:Linux Enterprise Server 12 SP1
 before 0.99.22.1-12.1
0.99.22.1-12.1
quagga
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 0.99.22.1-12.1
0.99.22.1-12.1
quagga
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 0.99.15-0.24.2
0.99.15-0.24.2
quagga
SUSE:Linux Enterprise Server 11 SP4
 before 0.99.15-0.24.2
0.99.15-0.24.2
quagga
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 0.99.15-0.24.2
0.99.15-0.24.2
quagga
Ubuntu:14.04:LTS
 before 0.99.22.4-3ubuntu1.2, plus listed versions
0.99.22.1-20.99.22.4-10.99.22.4-20.99.22.4-30.99.22.4-3ubuntu10.99.22.4-3ubuntu1.1
0.99.22.4-3ubuntu1.2
quagga
Ubuntu:16.04:LTS
 before 0.99.24.1-2ubuntu1.1, plus listed versions
0.99.24.1-20.99.24.1-2ubuntu1
0.99.24.1-2ubuntu1.1
quagga
openSUSE:Tumbleweed
 before 1.0.20160315-5.1
1.0.20160315-5.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2016-4049 is a high vulnerability (CVSS 7.5) in Quagga, published May 5, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.64%, the 91st percentile. Fixed in quagga 0.99.22.4-1+wheezy3.

References

Show 49 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open