← Back

CVE-2013-2236

nvd nist
Published: Oct 24, 2013Modified: Apr 29, 2026

JSON object

Loading...
2.6
Vector
AV:N/AC:H/Au:N/C:N/I:N/A:P
Exploitability: 4.9 / Impact: 2.9
Source: NVD

Description

Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.

Affected (2)

Products: Quagga: Quagga
1 product
Quagga
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Quagga
Up to 0.99.22.1
Version 0.99.22

References (16)

Timeline

No history available yet.