CVE-2012-1820

LOW 2.9CVE-2012-1820 · Published 13/06/2012 · updated 16/06/2026

In short

CVE-2012-1820 is a LOW (CVSS 2.9) vulnerability affecting quagga (quagga).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 64.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
quagga quagga	`= 0.95= 0.96= 0.96.1= 0.96.2= 0.96.3= 0.96.4= 0.96.5= 0.97.0= 0.97.1= 0.97.2= 0.97.3= 0.97.4= 0.97.5= 0.98.0= 0.98.1= 0.98.2= 0.98.3= 0.98.4= 0.98.5= 0.98.6= 0.99.1= 0.99.10= 0.99.11= 0.99.12= 0.99.13= 0.99.14= 0.99.15= 0.99.16= 0.99.17= 0.99.18= 0.99.19= 0.99.2= 0.99.20= 0.99.3= 0.99.4= 0.99.5= 0.99.6= 0.99.7= 0.99.8= 0.99.9≤ 0.99.20.1`	No fix yet

Description

The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering (ORF) capability TLV in an OPEN message.

References

More vulnerabilities in quagga

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

quagga

= 0.95= 0.96= 0.96.1= 0.96.2= 0.96.3= 0.96.4= 0.96.5= 0.97.0= 0.97.1= 0.97.2= 0.97.3= 0.97.4= 0.97.5= 0.98.0= 0.98.1= 0.98.2= 0.98.3= 0.98.4= 0.98.5= 0.98.6= 0.99.1= 0.99.10= 0.99.11= 0.99.12= 0.99.13= 0.99.14= 0.99.15= 0.99.16= 0.99.17= 0.99.18= 0.99.19= 0.99.2= 0.99.20= 0.99.3= 0.99.4= 0.99.5= 0.99.6= 0.99.7= 0.99.8= 0.99.9≤ 0.99.20.1

No fix yet

More vulnerabilities in quagga

See all →