Skip to contentQuagga Quagga vulnerabilities
- quaggaAn issue was discovered in Quagga through 1.2.4. Unsafe chown/chmod operations in the suggested...CVE-2021-44038Fix available7.8 High
- quagga, debian linux, redhat enterprise linux +2 morequagga (ospf6d) 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removalCVE-2012-55216.5 Medium
- open shortest path first (ospf) protocol, quagga, suse opensuse +2 more +4 moreOpen Shortest Path First (OSPF) protocol implementations may improperly determine LSA recency in affected Quagga and downstream implementations (SUSE, openSUSE, and Red Hat packages)CVE-2017-32248.2 High
- quagga bgpd, quagga, canonical ubuntu linux +1 more +3 moreThe Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent...CVE-2018-5378EPSS 74.2%7.1 High
- quagga bgpd, quagga, canonical ubuntu linux +2 more +4 moreThe Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in...CVE-2018-5381Fix availableEPSS 30.2%6.5 Medium
- quagga bgpd, quagga, canonical ubuntu linux +2 more +4 moreThe Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string...CVE-2018-5380Fix availableEPSS 14.8%4.3 Medium
- quagga bgpd, quagga, canonical ubuntu linux +7 more +9 moreThe Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing...CVE-2018-5379Fix availableEPSS 38.5%7.5 High
- quagga, debian linux +1 moreThe aspath_put function in bgpd/bgp_aspath.c in Quagga before 1.2.2 allows remote attackers to...CVE-2017-16227Fix availableEPSS 46.0%7.5 High
- quaggaAll versions of Quagga, 0.93 through 1.1.0, are vulnerable to an unbounded memory allocation in...CVE-2017-5495Fix availableEPSS 18.8%7.5 High
- quagga, debian linux +1 moreIt was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based...CVE-2016-1245Fix available9.8 Critical
- quagga, opensuse leap, opensuse +2 moreThe bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when...CVE-2016-4049Fix available7.5 High
- quagga, debian linux +1 moreThe bgp_nlri_parse_vpnv4 function in bgp_mplsvpn.c in the VPNv4 NLRI parser in bgpd in Quagga...CVE-2016-2342Fix availableEPSS 13.3%8.1 High
- quaggaThe bgp_attr_unknown function in bgp_attr.c in Quagga 0.99.21 does not properly initialize the...CVE-2013-60514.3 Medium
- quaggaStack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api...CVE-2013-2236Fix available2.6 Low
- quaggaThe bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers...CVE-2012-1820Fix available2.9 Low
- quaggaThe BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers...CVE-2012-02555.0 Medium
- quaggaBuffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote...CVE-2012-02503.3 Low
- quaggaBuffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2...CVE-2012-02493.3 Low
- quaggaHeap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in...CVE-2011-33277.5 High
- quaggaThe ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers...CVE-2011-33265.0 Medium
- quaggaospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of...CVE-2011-33255.0 Medium
- quaggaThe ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga...CVE-2011-33245.0 Medium
- quaggaThe OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a...CVE-2011-33235.0 Medium
- quaggabgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (session reset...CVE-2010-16755.0 Medium
- quaggaThe extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a...CVE-2010-1674EPSS 13.4%5.0 Medium
- quaggabgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attackers to...CVE-2010-29495.0 Medium
- quaggaStack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in...CVE-2010-29486.5 Medium
- quaggaThe BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of...CVE-2009-1572Fix available5.0 Medium
- quaggabgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service ...CVE-2007-4826Fix available3.5 Low
- quaggabgpd/bgp_attr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not...CVE-2007-1995Fix available6.3 Medium
- quaggabgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service (CPU...CVE-2006-22764.9 Medium
- quagga routing software suiteRIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication...CVE-2006-2224Public exploitEPSS 10.6%5.0 Medium
- quaggaRIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1)...CVE-2006-2223Public exploitEPSS 11.5%5.0 Medium
- gnu glibc, zebra, intel ia64 +4 more +6 moreThe getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a...CVE-2003-08594.9 Medium
- gnu zebra, quagga routing software suite +1 moreZebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service...CVE-2003-0858Fix available2.1 Low
- gnu zebra, quagga, sgi propack +2 moreThe vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub...CVE-2003-0795Public exploit5.0 Medium