CVE-2011-3327

HIGH 7.5CVE-2011-3327 · Published 10/10/2011 · updated 16/06/2026

In short

CVE-2011-3327 is a HIGH (CVSS 7.5) vulnerability affecting quagga (quagga).
Chance of exploitation in the next 30 days (EPSS): 7.6%, higher than 94.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
quagga quagga	`= 0.95= 0.96= 0.96.1= 0.96.2= 0.96.3= 0.96.4= 0.96.5= 0.97.0= 0.97.1= 0.97.2= 0.97.3= 0.97.4= 0.97.5= 0.98.0= 0.98.1= 0.98.2= 0.98.3= 0.98.4= 0.98.5= 0.98.6= 0.99.1= 0.99.10= 0.99.11= 0.99.12= 0.99.13= 0.99.14= 0.99.15= 0.99.16= 0.99.17= 0.99.2= 0.99.3= 0.99.4= 0.99.5= 0.99.6= 0.99.7= 0.99.8= 0.99.9≤ 0.99.18`	No fix yet

Description

Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by sending a crafted BGP UPDATE message over IPv4.

References

More vulnerabilities in quagga

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free