Quagga

quagga

36 CVEs • 2 products

Products (2)

Click to collapse

Toggle

Quagga Routing Software Suite

quagga_routing_software_suite

CVEs (36)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-3325 1Quagga 1Quagga Apr 29, 2026 Oct 10, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet.
CVE-2011-3324 1Quagga 1Quagga Apr 29, 2026 Oct 10, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via trailing zero...Show more The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via trailing zero values in the Link State Advertisement (LSA) header list of an IPv6 Database Description message.Show less
CVE-2011-3323 1Quagga 1Quagga Apr 29, 2026 Oct 10, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (out-of-bounds memory access and daemon crash) via a Link State Update message with an invalid IPv6 prefix...Show more The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (out-of-bounds memory access and daemon crash) via a Link State Update message with an invalid IPv6 prefix length.Show less
CVE-2010-1675 1Quagga 1Quagga Apr 29, 2026 Mar 29, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (session reset) via a malformed AS_PATHLIMIT path attribute.
CVE-2010-1674 1Quagga 1Quagga Apr 29, 2026 Mar 29, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed Extended Communities attribute.
CVE-2010-2949 1Quagga 1Quagga Apr 29, 2026 Sep 10, 2010 N/A· v4 N/A· v3 5.0 MEDIUM· v2 bgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unknown AS type in an AS path attribute in a B...Show more bgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unknown AS type in an AS path attribute in a BGP UPDATE message.Show less
CVE-2010-2948 1Quagga 1Quagga Apr 29, 2026 Sep 10, 2010 N/A· v4 N/A· v3 6.5 MEDIUM· v2 Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arb...Show more Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a malformed Outbound Route Filtering (ORF) record in a BGP ROUTE-REFRESH (RR) message.Show less
CVE-2009-1572 1Quagga 1Quagga Apr 23, 2026 May 6, 2009 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing ASN elements whose string representation is longer than expected, which triggers...Show more The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error.Show less
CVE-2007-4826 1Quagga 1Quagga Apr 23, 2026 Sep 12, 2007 N/A· v4 N/A· v3 3.5 LOW· v2 bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service (crash) via a malformed (1) OPEN message or (2) a COMMUNITY attribute, which triggers a NULL pointer dereference. NOTE: vec...Show more bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service (crash) via a malformed (1) OPEN message or (2) a COMMUNITY attribute, which triggers a NULL pointer dereference. NOTE: vector 2 only exists when debugging is enabled.Show less
CVE-2007-1995 1Quagga 1Quagga Apr 23, 2026 Apr 12, 2007 N/A· v4 N/A· v3 6.3 MEDIUM· v2 bgpd/bgp_attr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not validate length values in the MP_REACH_NLRI and MP_UNREACH_NLRI attributes, which allows remote attackers to cause a denial of...Show more bgpd/bgp_attr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not validate length values in the MP_REACH_NLRI and MP_UNREACH_NLRI attributes, which allows remote attackers to cause a denial of service (daemon crash or exit) via crafted UPDATE messages that trigger an assertion error or out of bounds read.Show less
CVE-2006-2276 1Quagga 1Quagga Apr 16, 2026 May 10, 2006 N/A· v4 N/A· v3 4.9 MEDIUM· v2 bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service (CPU consumption) via a certain sh ip bgp command entered in the telnet interface.
CVE-2006-2224 1Quagga 1Quagga Routing Software Suite Apr 16, 2026 May 5, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.
CVE-2006-2223 1Quagga 1Quagga Apr 16, 2026 May 5, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information...Show more RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information (routing state) via REQUEST packets such as SEND UPDATE.Show less
CVE-2003-0859 5Gnu IntelQuagga+2 more 7Enterprise Linux GlibcIa64+4 more Apr 16, 2026 Dec 15, 2003 N/A· v4 N/A· v3 4.9 MEDIUM· v2 The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.
CVE-2003-0858 2Gnu Quagga 2Quagga Routing Software Suite Zebra Apr 16, 2026 Dec 15, 2003 N/A· v4 N/A· v3 2.1 LOW· v2 Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.
CVE-2003-0795 3Gnu QuaggaSgi 3Propack QuaggaZebra Apr 16, 2026 Dec 15, 2003 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial of service (crash) v...Show more The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial of service (crash) via a malformed telnet command to the telnet CLI port, which may trigger a null dereference.Show less