Vulnerabilities > Quagga > Quagga > Low

DATE CVE VULNERABILITY TITLE RISK
2019-11-25 CVE-2012-5521 Reachable Assertion vulnerability in multiple products
quagga (ospf6d) 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removal
low complexity
quagga debian redhat CWE-617
3.3
2012-06-13 CVE-2012-1820 Remote Denial Of Service vulnerability in Quagga bgpd 'bgp_capability_orf()' BGP OPEN Message
The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering (ORF) capability TLV in an OPEN message.
2.9
2012-04-05 CVE-2012-0249 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Quagga
Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.
low complexity
quagga CWE-119
3.3
2012-04-05 CVE-2012-0250 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Quagga
Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (daemon crash) via a Link State Update (aka LS Update) packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the value in the Length header field.
low complexity
quagga CWE-119
3.3
2007-09-12 CVE-2007-4826 Denial Of Service vulnerability in Quagga Routing Suite
bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service (crash) via a malformed (1) OPEN message or (2) a COMMUNITY attribute, which triggers a NULL pointer dereference.
network
quagga
3.5