Skip to content

Quagga vulnerabilities

Products

Newest

quagga An issue was discovered in Quagga through 1.2.4. Unsafe chown/chmod operations in the suggested... CVE-2021-44038 Fix available 7.8 HighNovember 19, 2021
quagga, debian linux, redhat enterprise linux +2 more quagga (ospf6d) 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removal CVE-2012-5521 6.5 MediumNovember 25, 2019
open shortest path first (ospf) protocol, quagga, suse opensuse +2 more +4 more Open Shortest Path First (OSPF) protocol implementations may improperly determine LSA recency in affected Quagga and downstream implementations (SUSE, openSUSE, and Red Hat packages) CVE-2017-3224 8.2 HighJuly 24, 2018
quagga bgpd, quagga, canonical ubuntu linux +1 more +3 more The Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent... CVE-2018-5378 EPSS 74.2% 7.1 HighFebruary 16, 2018
quagga bgpd, quagga, canonical ubuntu linux +2 more +4 more The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in... CVE-2018-5381 Fix available EPSS 30.2% 6.5 MediumFebruary 13, 2018
quagga bgpd, quagga, canonical ubuntu linux +2 more +4 more The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string... CVE-2018-5380 Fix available EPSS 14.8% 4.3 MediumFebruary 13, 2018
quagga bgpd, quagga, canonical ubuntu linux +7 more +9 more The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing... CVE-2018-5379 Fix available EPSS 38.5% 7.5 HighFebruary 13, 2018
quagga, debian linux +1 more The aspath_put function in bgpd/bgp_aspath.c in Quagga before 1.2.2 allows remote attackers to... CVE-2017-16227 Fix available EPSS 46.0% 7.5 HighOctober 29, 2017
quagga All versions of Quagga, 0.93 through 1.1.0, are vulnerable to an unbounded memory allocation in... CVE-2017-5495 Fix available EPSS 18.8% 7.5 HighJanuary 24, 2017
quagga, debian linux +1 more It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based... CVE-2016-1245 Fix available 9.8 CriticalOctober 18, 2016
quagga, opensuse leap, opensuse +2 more The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when... CVE-2016-4049 Fix available 7.5 HighMay 5, 2016
quagga, debian linux +1 more The bgp_nlri_parse_vpnv4 function in bgp_mplsvpn.c in the VPNv4 NLRI parser in bgpd in Quagga... CVE-2016-2342 Fix available EPSS 13.3% 8.1 HighMarch 17, 2016
quagga The bgp_attr_unknown function in bgp_attr.c in Quagga 0.99.21 does not properly initialize the... CVE-2013-6051 4.3 MediumNovember 26, 2013
quagga Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api... CVE-2013-2236 Fix available 2.6 LowOctober 17, 2013
quagga The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers... CVE-2012-1820 Fix available 2.9 LowJune 13, 2012
quagga The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers... CVE-2012-0255 5.0 MediumApril 5, 2012
quagga Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote... CVE-2012-0250 3.3 LowApril 5, 2012
quagga Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2... CVE-2012-0249 3.3 LowApril 5, 2012
quagga Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in... CVE-2011-3327 7.5 HighOctober 5, 2011
quagga The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers... CVE-2011-3326 5.0 MediumOctober 5, 2011
quagga ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of... CVE-2011-3325 5.0 MediumOctober 5, 2011
quagga The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga... CVE-2011-3324 5.0 MediumOctober 5, 2011
quagga The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a... CVE-2011-3323 5.0 MediumOctober 5, 2011
quagga bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (session reset... CVE-2010-1675 5.0 MediumMarch 21, 2011
quagga The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a... CVE-2010-1674 EPSS 13.4% 5.0 MediumMarch 21, 2011
quagga bgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attackers to... CVE-2010-2949 5.0 MediumSeptember 6, 2010
quagga Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in... CVE-2010-2948 6.5 MediumSeptember 6, 2010
quagga The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of... CVE-2009-1572 Fix available 5.0 MediumMay 4, 2009
quagga bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service ... CVE-2007-4826 Fix available 3.5 LowSeptember 12, 2007
quagga bgpd/bgp_attr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not... CVE-2007-1995 Fix available 6.3 MediumApril 12, 2007
quagga bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service (CPU... CVE-2006-2276 4.9 MediumMay 9, 2006
quagga routing software suite RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication... CVE-2006-2224 Public exploit EPSS 10.6% 5.0 MediumMay 5, 2006
quagga RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1)... CVE-2006-2223 Public exploit EPSS 11.5% 5.0 MediumMay 5, 2006
gnu glibc, zebra, intel ia64 +4 more +6 more The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a... CVE-2003-0859 4.9 MediumNovember 18, 2003
gnu zebra, quagga routing software suite +1 more Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service... CVE-2003-0858 Fix available 2.1 LowNovember 18, 2003
gnu zebra, quagga, sgi propack +2 more The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub... CVE-2003-0795 Public exploit 5.0 MediumNovember 18, 2003