| Package | Affected versions | Patched versions |
|---|---|---|
| quagga | = 0.95= 0.96= 0.96.1= 0.96.2= 0.96.3= 0.96.4= 0.96.5= 0.97.0= 0.97.1= 0.97.2= 0.97.3= 0.97.4= 0.97.5= 0.98.0= 0.98.1= 0.98.2= 0.98.3= 0.98.4= 0.98.5= 0.98.6= 0.99.1= 0.99.10= 0.99.11= 0.99.12= 0.99.13= 0.99.14= 0.99.15= 0.99.16= 0.99.17= 0.99.18= 0.99.19= 0.99.2= 0.99.3= 0.99.4= 0.99.5= 0.99.6= 0.99.7= 0.99.8= 0.99.9≤ 0.99.20 |
Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free