QU
Vendor
Quagga
36
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-44038 | QU Quagga Quagga | 7.8 | Nov 19 | An issue was discovered in Quagga through 1.2.4 |
| CVE-2012-5521 | QU Quagga Quagga | 6.5 | Nov 25 | quagga (ospf6d) 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removal |
| CVE-2017-3224 | QU Quagga Quagga | 8.2 | Jul 24 | Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber |
| CVE-2018-5381 | QU Quagga Quagga | 7.5 | Feb 19 | The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function |
| CVE-2018-5380 | QU Quagga Quagga | 4.3 | Feb 19 | The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input |
| CVE-2018-5379 | QU Quagga Quagga | 9.8 | Feb 19 | The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes |
| CVE-2018-5378 | QU Quagga Quagga | 5.9 | Feb 19 | The Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute length is invalid |
| CVE-2017-16227 | QU Quagga Quagga | 7.5 | Oct 29 | The aspath_put function in bgpd/bgp_aspath.c in Quagga before 1.2.2 allows remote attackers to cause a denial of service (session drop) via BGP UPDATE messages, because AS_PATH… |
| CVE-2016-1245 | QU Quagga Quagga | 9.8 | Feb 22 | It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages |
| CVE-2017-5495 | QU Quagga Quagga | 7.5 | Jan 24 | All versions of Quagga, 0.93 through 1.1.0, are vulnerable to an unbounded memory allocation in the telnet 'vty' CLI, leading to a Denial-of-Service of Quagga daemons, or even the… |
| CVE-2016-4049 | QU Quagga Quagga | 7.5 | May 23 | The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of service… |
| CVE-2016-2342 | QU Quagga Quagga | 8.1 | Mar 17 | The bgp_nlri_parse_vpnv4 function in bgp_mplsvpn.c in the VPNv4 NLRI parser in bgpd in Quagga before 1.0.20160309, when a certain VPNv4 configuration is used, relies on a… |
| CVE-2013-6051 | QU Quagga Quagga | – | Dec 14 | The bgp_attr_unknown function in bgp_attr.c in Quagga 0.99.21 does not properly initialize the total variable, which allows remote attackers to cause a denial of service (bgpd… |
| CVE-2013-2236 | QU Quagga Quagga | – | Oct 24 | Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line… |
| CVE-2012-1820 | QU Quagga Quagga | – | Jun 13 | The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) by leveraging a… |
| CVE-2012-0255 | QU Quagga Quagga | – | Apr 5 | The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service… |
| CVE-2012-0250 | QU Quagga Quagga | – | Apr 5 | Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (daemon crash) via a Link State Update (aka… |
| CVE-2012-0249 | QU Quagga Quagga | – | Apr 5 | Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of… |
| CVE-2011-3327 | QU Quagga Quagga | – | Oct 10 | Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon… |
| CVE-2011-3326 | QU Quagga Quagga | – | Oct 10 | The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via an invalid Link State… |
| CVE-2011-3325 | QU Quagga Quagga | – | Oct 10 | ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a… |
| CVE-2011-3324 | QU Quagga Quagga | – | Oct 10 | The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (assertion… |
| CVE-2011-3323 | QU Quagga Quagga | – | Oct 10 | The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (out-of-bounds memory access and daemon crash) via a Link State… |
| CVE-2010-1674 | QU Quagga Quagga | – | Mar 29 | The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a… |
| CVE-2010-1675 | QU Quagga Quagga | – | Mar 29 | bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (session reset) via a malformed AS_PATHLIMIT path attribute |
| CVE-2010-2949 | QU Quagga Quagga | – | Sep 10 | bgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an… |
| CVE-2010-2948 | QU Quagga Quagga | – | Sep 10 | Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a denial of… |
| CVE-2009-1572 | QU Quagga Quagga | – | May 6 | The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing ASN elements whose string representation… |
| CVE-2007-4826 | QU Quagga Quagga | – | Sep 12 | bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service (crash) via a malformed (1) OPEN message or (2) a COMMUNITY attribute, which… |
| CVE-2007-1995 | QU Quagga Quagga | – | Apr 12 | bgpd/bgp_attr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not validate length values in the MP_REACH_NLRI and MP_UNREACH_NLRI attributes, which… |
| CVE-2006-2276 | QU Quagga Quagga | – | May 10 | bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service (CPU consumption) via a certain sh ip bgp command entered in the telnet interface |
| CVE-2006-2224 | QR Quagga Routing Software Suite Quagga | – | May 5 | RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE… |
| CVE-2006-2223 | QU Quagga Quagga | – | May 5 | RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote… |
| CVE-2003-0858 | QR Quagga Routing Software Suite Quagga | – | Dec 15 | Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface |
| CVE-2003-0859 | QR Quagga Routing Software Suite Quagga | – | Dec 15 | The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink… |
| CVE-2003-0795 | QU Quagga Quagga | – | Dec 15 | The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote… |