CVE-2012-0249: Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of… | LiveThreat CVE Feed — Verisq

Login Request a demo

Unscored severity · published Apr 5, 2012

CVE-2012-0249

Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of…

–

CVSS

1.8%

EPSS

No

On KEV

Description

Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.

Exploitation

Is it being used?

Exploit prediction (EPSS)1.8% · higher than 78% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

QU

Quagga · Quagga

through 0.99.20; 0.95; 0.96; 0.96.1; 0.96.2; 0.96.3; +34 more · source: NVD

Affected product

QU

Quagga

Quagga

All Quagga CVEs

References

https://nvd.nist.gov/vuln/detail/CVE-2012-0249

https://www.cve.org/CVERecord?id=CVE-2012-0249

lists.fedoraproject.org

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078794.html

lists.fedoraproject.org

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078910.html

lists.fedoraproject.org

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078926.html

http://rhn.redhat.com/errata/RHSA-2012-1258.html

http://rhn.redhat.com/errata/RHSA-2012-1259.html

http://secunia.com/advisories/48949

More from Quagga

9.8

The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes

9.8

It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages

8.2

Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber

8.1

The bgp_nlri_parse_vpnv4 function in bgp_mplsvpn.c in the VPNv4 NLRI parser in bgpd in Quagga before 1.0.20160309, when a certain VPNv4 configuration is used, relies on a…

7.8

An issue was discovered in Quagga through 1.2.4