Description
Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (daemon crash) via a Link State Update (aka LS Update) packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the value in the Length header field.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://rhn.redhat.com/errata/RHSA-2012-1259.html ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078910.html ↗
- http://www.debian.org/security/2012/dsa-2459 ↗
- http://www.kb.cert.org/vuls/id/551715 ↗
- http://secunia.com/advisories/48949 ↗
- http://rhn.redhat.com/errata/RHSA-2012-1258.html ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078926.html ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078794.html ↗