{"id":"CVE-2016-1245","aliases":["DEBIAN-CVE-2016-1245","DLA-662-1","DSA-3695-1","EUVD-2016-2344","GHSA-578j-w5r9-87q8","MGASA-2016-0374","RHSA-2017:0794","SUSE-SU-2016:2569-1","SUSE-SU-2016:2618-1","SUSE-SU-2017:2294-1","UBUNTU-CVE-2016-1245","USN-3110-1","openSUSE-SU-2024:10362-1"],"status":"published","title":"It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based...","description":"It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03656,"percentile":0.89693,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2016-10-18T00:00:00Z","modified":"2026-10-20T13:12:11Z","fixes":[{"ecosystem":"Debian:7","package":"quagga","fixed_in":["0.99.22.4-1+wheezy3+deb7u1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"quagga","fixed_in":["0.99.23.1-1+deb8u3"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"quagga","fixed_in":["0.99.22.4-4.3.mga5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"quagga","fixed_in":["0.99.15-0.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"quagga","fixed_in":["0.99.15-0.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"quagga","fixed_in":["0.99.15-0.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"quagga","fixed_in":["0.99.22.1-15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"quagga","fixed_in":["0.99.22.1-15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"quagga","fixed_in":["0.99.22.1-15.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"quagga","fixed_in":["0.99.22.4-3ubuntu1.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"quagga","fixed_in":["0.99.24.1-2ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:7","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.22.4-1+wheezy3+deb7u1"}]}],"versions":["0.99.21-4+wheezy1","0.99.21-4+wheezy2","0.99.22-1","0.99.22.1-1","0.99.22.1-2","0.99.22.4-1","0.99.22.4-1+wheezy1","0.99.22.4-1+wheezy2","0.99.22.4-1+wheezy3"]},{"source":"osv","ecosystem":"Debian:8","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.23.1-1+deb8u3"}]}],"versions":["0.99.23.1-1","0.99.23.1-1+deb8u1","0.99.23.1-1+deb8u2"]},{"source":"osv","ecosystem":"Mageia:5","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.22.4-4.3.mga5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"quagga-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.15-14.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"quagga-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.15-14.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"quagga-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.15-14.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.15-14.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"quagga-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.15-14.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"quagga-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.15-14.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"quagga-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.15-14.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.15-14.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.15-0.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.15-0.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.15-0.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.22.1-15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.22.1-15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.22.1-15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-17.3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-17.3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-17.3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-17.3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-17.3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-17.3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-17.3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.22.4-3ubuntu1.3"}]}],"versions":["0.99.22.1-2","0.99.22.4-1","0.99.22.4-2","0.99.22.4-3","0.99.22.4-3ubuntu1","0.99.22.4-3ubuntu1.1","0.99.22.4-3ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.24.1-2ubuntu1.2"}]}],"versions":["0.99.24.1-2","0.99.24.1-2ubuntu1","0.99.24.1-2ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.22.4-3ubuntu1.3"}]}],"versions":["0.99.22.1-2","0.99.22.4-1","0.99.22.4-2","0.99.22.4-3","0.99.22.4-3ubuntu1","0.99.22.4-3ubuntu1.1","0.99.22.4-3ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.24.1-2ubuntu1.2"}]}],"versions":["0.99.24.1-2","0.99.24.1-2ubuntu1","0.99.24.1-2ubuntu1.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.20160315-5.1"}]}],"bundled":6}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"quagga","product":"quagga"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2017-0794.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/201701-48","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/93775","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1386109","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"http://www.gossamer-threads.com/lists/quagga/users/31952","tags":["x_refsource_CONFIRM","x_transferred","Mailing List","Mitigation","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2016/dsa-3695","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://github.com/Quagga/quagga/commit/cfb1fae25f8c092e0d17073eaf7bd428ce1cd546","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1245","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-578j-w5r9-87q8"},{"url":"https://advisories.mageia.org/MGASA-2016-0374.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19619","tags":["report"]},{"url":"https://lists.quagga.net/pipermail/quagga-users/2016-October/014478.html","tags":["web","report"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0794","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=674862","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=770731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=839620","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=842308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=862826","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=981124","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316571","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1331372","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1416013","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0794.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2236","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2236","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2236","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1245","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1245","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2342","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2342","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2342","tags":["advisory"]},{"url":"http://mirror.easyname.at/nongnu//quagga/quagga-1.0.20160309.changelog.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4049","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4049","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4049","tags":["advisory"]},{"url":"http://openwall.com/lists/oss-security/2016/04/27/7","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5495","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5495","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5495","tags":["advisory"]},{"url":"https://lists.quagga.net/pipermail/quagga-dev/2017-January/016586.html","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162569-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1005258","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1245","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162618-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172294-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1021669","tags":["report"]},{"url":"https://bugzilla.suse.com/1034273","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5495","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-1245","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3110-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4049","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-1245","description":"It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent.","status":"published","published":"2017-02-22T23:00:00Z","modified":"2024-08-05T22:48:13.613Z","updated_at":"2026-11-02T14:33:35.841056Z"}],"euvd":[{"id":"EUVD-2016-2344","description":"It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent.","status":"published","published":"2017-02-22T23:00:00Z","modified":"2024-08-05T22:48:13Z","updated_at":"2026-11-03T02:22:57.974183Z"}],"ghsa":[{"id":"GHSA-578j-w5r9-87q8","title":"It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based...","description":"It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent.","status":"published","published":"2022-05-14T03:57:55Z","modified":"2023-02-03T05:00:57Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:52:53.034472Z"}],"nvd":[{"id":"CVE-2016-1245","description":"It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent.","status":"published","published":"2017-02-22T23:59:00.143Z","modified":"2026-06-17T00:41:32.743Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:35.822579Z"}],"osv":[{"id":"CVE-2016-1245","description":"It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent.","status":"published","published":"2017-02-22T23:59:00.143Z","modified":"2026-10-20T13:12:11.789134555Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:02.114472Z"},{"id":"RHSA-2017:0794","title":"Red Hat Security Advisory: quagga security and bug fix update","status":"published","published":"2024-09-15T23:49:43Z","modified":"2026-06-26T12:22:00.337085357Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"UBUNTU-CVE-2016-1245","description":"It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent.","status":"published","published":"2016-10-18T00:00:00Z","modified":"2026-02-04T03:20:42.085506Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:11.492576Z"},{"id":"DLA-662-1","title":"quagga - security update","status":"published","published":"2016-10-18T00:00:00Z","modified":"2026-03-09T02:09:20.337276Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3695-1","title":"quagga - security update","status":"published","published":"2016-10-18T00:00:00Z","modified":"2026-03-09T01:20:57.373689Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2016-0374","title":"Updated quagga packages fix security vulnerability","description":"It was discovered that the zebra daemon in the Quagga routing suite\nsuffered from a stack-based buffer overflow when processing IPv6\nNeighbor Discovery messages (CVE-2016-1245).\n","status":"published","published":"2016-11-11T22:09:30Z","modified":"2026-04-16T06:25:04.346038812Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2024:10362-1","title":"libospf0-1.0.20160315-5.1 on GA media","description":"These are all security issues fixed in the libospf0-1.0.20160315-5.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:07:42.576001Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2016:2569-1","title":"Security update for quagga","description":"\nThis update for quagga fixes the following issues:\n\n- CVE-2016-1245: Fix for a zebra stack overrun in IPv6 RA receive code (bsc#1005258).\n","status":"published","published":"2016-10-19T16:09:35Z","modified":"2026-02-04T03:23:36.648719Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:2618-1","title":"Security update for quagga","description":"\nThis update for quagga fixes the following issue:\n\n- CVE-2016-1245: Fix for a zebra stack overrun in IPv6 RA receive code (bsc#1005258).\n","status":"published","published":"2016-10-24T12:26:38Z","modified":"2026-02-04T03:01:40.628302Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2017:2294-1","title":"Security update for quagga","description":"This update provides Quagga 1.1.1, which brings several fixes and enhancements.\n\nSecurity issues fixed:\n\n- CVE-2017-5495: Telnet 'vty' interface DoS due to unbounded memory allocation. (bsc#1021669)\n- CVE-2016-1245: Stack overrun in IPv6 RA receive code. (bsc#1005258)\n\nBug fixes:\n\n- Do not enable zebra's TCP interface (port 2600) to use default UNIX socket for communication\n  between the daemons. (fate#323170)\n\nBetween 0.99.22.1 and 1.1.1 the following improvements have been implemented:\n\n- Changed the default of 'link-detect' state, controlling whether zebra will respond to\n  link-state events and consider an interface to be down when link is down. To retain the\n  current behavior save your config before updating, otherwise remove the 'link-detect'\n  flag from your config prior to updating. There is also a new global 'default link-detect\n  (on|off)' flag to configure the global default.\n- Greatly improved nexthop resolution for recursive routes.\n- Event driven nexthop resolution for BGP.\n- Route tags support.\n- Transport of TE related metrics over OSPF, IS-IS.\n- IPv6 Multipath for zebra and BGP.\n- Multicast RIB support has been extended. It still is IPv4 only.\n- RIP for IPv4 now supports equal-cost multipath (ECMP).\n- route-maps have a new action 'set ipv6 next-hop peer-address'.\n- route-maps have a new action 'set as-path prepend last-as'.\n- 'next-hop-self all' to override nexthop on iBGP route reflector setups.\n- New pimd daemon provides IPv4 PIM-SSM multicast routing.\n- IPv6 address management has been improved regarding tentative addresses. This is visible in\n  that a freshly configured address will not immediately be marked as usable.\n- Recursive route support has been overhauled. Scripts parsing 'show ip route' output may need\n  adaptation.\n- A large amount of changes has been merged for ospf6d. Careful evaluation prior to deployment\n  is recommended.\n- Multiprotocol peerings over IPv6 now try to find a more appropriate IPv4 nexthop by looking at\n  the interface.\n- Relaxed bestpath criteria for multipath and improved display of multipath routes in 'show ip bgp'.\n  Scripts parsing this output may need to be updated.\n- Support for iBGP TTL security.\n","status":"published","published":"2017-08-29T14:49:01Z","modified":"2025-05-02T04:05:07.459402Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"USN-3110-1","title":"quagga vulnerability","description":"David Lamparter discovered that Quagga incorrectly handled certain IPv6\nrouter advertisements. A remote attacker could possibly use this issue to\ncause Quagga to crash, resulting in a denial of service.\n","status":"published","published":"2016-10-25T12:42:49Z","modified":"2026-02-10T04:41:02Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}