Browse CVEs

HIGH 7.8 CVE-2021-44038 An issue was discovered in Quagga through 1.2.4. Unsafe chown/chmod operations in the suggested spec file allow users (with control of the non-root-o… Quagga after 1.2.4 Fix from $1,9502021-11-19 HIGH 7.5 CVE-2017-5495EPSS 19% All versions of Quagga, 0.93 through 1.1.0, are vulnerable to an unbounded memory allocation in the telnet 'vty' CLI, leading to a Denial-of-Service … Quagga after 1.1.0 Fix from $1,9502017-01-24 HIGH 7.5 CVE-2016-4049 The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to … Quagga Mitigation only Fix from $1,9502016-05-23 MEDIUM 5.0 CVE-2012-0255 The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to c… Quagga after 0.99.20 Fix from $1,6002012-04-05 HIGH 7.5 CVE-2011-3327EPSS 8% Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause … Quagga after 0.99.18 Fix from $1,9502011-10-10 MEDIUM 5.0 CVE-2011-3323 The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (out-of-bounds memory access and da… Quagga after 0.99.18 Fix from $1,6002011-10-10 MEDIUM 5.0 CVE-2011-3324 The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a d… Quagga after 0.99.18 Fix from $1,6002011-10-10 MEDIUM 5.0 CVE-2011-3325 ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an I… Quagga after 0.99.18 Fix from $1,6002011-10-10 MEDIUM 5.0 CVE-2011-3326 The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via an … Quagga after 0.99.18 Fix from $1,6002011-10-10 MEDIUM 5.0 CVE-2010-1674EPSS 13% The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereference and app… Quagga after 0.99.17 Fix from $1,6002011-03-29 MEDIUM 5.0 CVE-2010-1675 bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (session reset) via a malformed AS_PATHLIMIT path attribute. Quagga after 0.99.17 Fix from $1,6002011-03-29 MEDIUM 6.5 CVE-2010-2948 Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in Quagga before 0.99.17 allows remote authenticated us… Quagga after 0.99.16 Fix from $1,6002010-09-10 MEDIUM 5.0 CVE-2010-2949 bgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attackers to cause a denial of service (NULL pointer dereference … Quagga after 0.99.16 Fix from $1,6002010-09-10 MEDIUM 5.0 CVE-2009-1572 The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing ASN elemen… Quagga after 0.99.11 Fix from $1,6002009-05-06 MEDIUM 6.3 CVE-2007-1995 bgpd/bgp_attr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not validate length values in the MP_REACH_NLRI and MP_UNREA… Quagga after 0.98.6 Fix from $1,6002007-04-12 MEDIUM 5.0 CVE-2006-2223EPSS 11% RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authen… Quagga Patch available Fix from $1,6002006-05-05 MEDIUM 5.0 CVE-2006-2224EPSS 10% RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify rou… Quagga Routing Software Suite after 0.99.3 Fix from $1,6002006-05-05