| Max CVSS | 7.5 | Min CVSS | 3.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-0250 | 3.3 |
Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (daemon crash) via a Link State Update (aka LS Update) packet containing a network-LSA link-state advertisement for
|
18-01-2018 - 02:29 | 05-04-2012 - 13:25 | |
| CVE-2012-0249 | 3.3 |
Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (a
|
18-01-2018 - 02:29 | 05-04-2012 - 13:25 | |
| CVE-2011-3324 | 5.0 |
The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via trailing zero values in the Link State Adver
|
06-01-2018 - 02:29 | 10-10-2011 - 10:55 | |
| CVE-2011-3326 | 5.0 |
The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via an invalid Link State Advertisement (LSA) type in an IPv4 Link State Update message.
|
06-01-2018 - 02:29 | 10-10-2011 - 10:55 | |
| CVE-2011-3327 | 7.5 |
Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by sending a crafted BGP UPDATE
|
06-01-2018 - 02:29 | 10-10-2011 - 10:55 | |
| CVE-2011-3323 | 5.0 |
The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (out-of-bounds memory access and daemon crash) via a Link State Update message with an invalid IPv6 prefix length.
|
06-01-2018 - 02:29 | 10-10-2011 - 10:55 | |
| CVE-2011-3325 | 5.0 |
ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet.
|
06-01-2018 - 02:29 | 10-10-2011 - 10:55 | |
| CVE-2010-1674 | 5.0 |
The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed Extended Communities attribute. Per: http://cwe.mitre.org/data/defini
|
06-01-2018 - 02:29 | 29-03-2011 - 18:55 |