QU
Product
Quagga
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 3Low 0
Watch
Add Quagga to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-5379 | 9.8 | Feb 19 | The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes Affected: through 1.2.2 |
| CVE-2016-1245 | 9.8 | Feb 22 | It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages Affected: through 1.0.20160315 |
| CVE-2017-3224 | 8.2 | Jul 24 | Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber Affected: All versions, or not specified |
| CVE-2016-2342 | 8.1 | Mar 17 | The bgp_nlri_parse_vpnv4 function in bgp_mplsvpn.c in the VPNv4 NLRI parser in bgpd in Quagga before 1.0.20160309, when a certain VPNv4 configuration is used, relies on a… Affected: 0.99.24 |
| CVE-2021-44038 | 7.8 | Nov 19 | An issue was discovered in Quagga through 1.2.4 Affected: through 1.2.4 |
| CVE-2018-5381 | 7.5 | Feb 19 | The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function Affected: through 1.2.2 |
| CVE-2017-16227 | 7.5 | Oct 29 | The aspath_put function in bgpd/bgp_aspath.c in Quagga before 1.2.2 allows remote attackers to cause a denial of service (session drop) via BGP UPDATE messages, because AS_PATH… Affected: through 1.2.1 |
| CVE-2017-5495 | 7.5 | Jan 24 | All versions of Quagga, 0.93 through 1.1.0, are vulnerable to an unbounded memory allocation in the telnet 'vty' CLI, leading to a Denial-of-Service of Quagga daemons, or even the… Affected: through 1.1.0 |
| CVE-2016-4049 | 7.5 | May 23 | The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of service… Affected: All versions, or not specified |
| CVE-2012-5521 | 6.5 | Nov 25 | quagga (ospf6d) 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removal Affected: 0.99.21 |
| CVE-2018-5378 | 5.9 | Feb 19 | The Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute length is invalid Affected: through 1.2.2 |
| CVE-2018-5380 | 4.3 | Feb 19 | The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input Affected: through 1.2.2 |
| CVE-2013-6051 | – | Dec 14 | The bgp_attr_unknown function in bgp_attr.c in Quagga 0.99.21 does not properly initialize the total variable, which allows remote attackers to cause a denial of service (bgpd… Affected: 0.99.21 |
| CVE-2013-2236 | – | Oct 24 | Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line… Affected: through 0.99.22.1; 0.99.22 |
| CVE-2012-1820 | – | Jun 13 | The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) by leveraging a… Affected: through 0.99.20.1; 0.95; 0.96; 0.96.1; 0.96.2; 0.96.3; +34 more |
| CVE-2012-0255 | – | Apr 5 | The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service… Affected: through 0.99.20; 0.95; 0.96; 0.96.1; 0.96.2; 0.96.3; +34 more |
| CVE-2012-0250 | – | Apr 5 | Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (daemon crash) via a Link State Update (aka… Affected: through 0.99.20; 0.99.1; 0.99.2; 0.99.3; 0.99.4; 0.99.5; +14 more |
| CVE-2012-0249 | – | Apr 5 | Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of… Affected: through 0.99.20; 0.95; 0.96; 0.96.1; 0.96.2; 0.96.3; +34 more |
| CVE-2011-3327 | – | Oct 10 | Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon… Affected: through 0.99.18; 0.95; 0.96; 0.96.1; 0.96.2; 0.96.3; +32 more |
| CVE-2011-3326 | – | Oct 10 | The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via an invalid Link State… Affected: through 0.99.18; 0.95; 0.96; 0.96.1; 0.96.2; 0.96.3; +32 more |
| CVE-2011-3325 | – | Oct 10 | ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a… Affected: through 0.99.18; 0.95; 0.96; 0.96.1; 0.96.2; 0.96.3; +32 more |
| CVE-2011-3324 | – | Oct 10 | The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (assertion… Affected: through 0.99.18; 0.95; 0.96; 0.96.1; 0.96.2; 0.96.3; +32 more |
| CVE-2011-3323 | – | Oct 10 | The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (out-of-bounds memory access and daemon crash) via a Link State… Affected: through 0.99.18; 0.95; 0.96; 0.96.1; 0.96.2; 0.96.3; +32 more |
| CVE-2010-1675 | – | Mar 29 | bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (session reset) via a malformed AS_PATHLIMIT path attribute Affected: through 0.99.17; 0.95; 0.96; 0.96.1; 0.96.2; 0.96.3; +31 more |
| CVE-2010-1674 | – | Mar 29 | The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a… Affected: through 0.99.17; 0.95; 0.96; 0.96.1; 0.96.2; 0.96.3; +31 more |
| CVE-2010-2949 | – | Sep 10 | bgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an… Affected: through 0.99.16; 0.95; 0.96; 0.96.1; 0.96.2; 0.96.3; +30 more |
| CVE-2010-2948 | – | Sep 10 | Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a denial of… Affected: through 0.99.16; 0.95; 0.96; 0.96.1; 0.96.2; 0.96.3; +30 more |
| CVE-2009-1572 | – | May 6 | The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing ASN elements whose string representation… Affected: through 0.99.11; 0.95; 0.96; 0.96.1; 0.96.2; 0.96.3; +25 more |
| CVE-2007-4826 | – | Sep 12 | bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service (crash) via a malformed (1) OPEN message or (2) a COMMUNITY attribute, which… Affected: through 0.99.8; 0.95; 0.96; 0.96.1; 0.96.2; 0.96.3; +22 more |
| CVE-2007-1995 | – | Apr 12 | bgpd/bgp_attr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not validate length values in the MP_REACH_NLRI and MP_UNREACH_NLRI attributes, which… Affected: through 0.98.6; 0.95; 0.96; 0.96.1; 0.96.2; 0.96.3; +14 more |
| CVE-2006-2276 | – | May 10 | bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service (CPU consumption) via a certain sh ip bgp command entered in the telnet interface Affected: 0.98.5; 0.99.3 |
| CVE-2006-2223 | – | May 5 | RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote… Affected: 0.98.5; 0.99.3 |
| CVE-2003-0795 | – | Dec 15 | The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote… Affected: through 0.96.3; 0.95; 0.96; 0.96.1; 0.96.2 |
Showing 33