Login Request a demo
Unscored severity · published Oct 10, 2011
CVE-2011-3324
The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (assertion…
–
CVSS
4.7%
EPSS
No
On KEV
Description
The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via trailing zero values in the Link State Advertisement (LSA) header list of an IPv6 Database Description message.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.7% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QU
Quagga · Quagga
through 0.99.18; 0.95; 0.96; 0.96.1; 0.96.2; 0.96.3; +32 more · source: NVD
Affected product
QU
Quagga
Quagga
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3324
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3324
code.quagga.net
http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=09395e2a0e93b2cf4258cb1de91887948796bb68
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00027.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00007.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00010.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2012-1258.html
More from Quagga
9.8
CVE-2018-5379
The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes
9.8
CVE-2016-1245
It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages
8.2
CVE-2017-3224
Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber
8.1
CVE-2016-2342
The bgp_nlri_parse_vpnv4 function in bgp_mplsvpn.c in the VPNv4 NLRI parser in bgpd in Quagga before 1.0.20160309, when a certain VPNv4 configuration is used, relies on a…
7.8
CVE-2021-44038
An issue was discovered in Quagga through 1.2.4