| Package | Affected versions | Patched versions |
|---|---|---|
| quagga | = 0.99.22≤ 0.99.22.1 |
Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free