The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via an invalid Link State Advertisement (LSA) type in an IPv4 Link State Update message.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade quagga-develUpgrade quaggaUpgrade quagga-contrib | Dec 1, 2016 | Oct 10, 2011 |
| Freebsd | — | Upgrade quagga | Dec 10, 2025 | Oct 5, 2011 |
| Gentoo Linux | — | Upgrade net-misc/quagga. | Oct 30, 2017 | Oct 10, 2011 |
| Oracle Solaris | — | Upgrade system/network/routing/quagga to version 0.99.19-0.175.0.4.0.2.0 on Solaris 11.0 | May 29, 2017 | Oct 10, 2011 |
| Oracle_linux | — | Upgrade quaggaUpgrade quagga-contribUpgrade quagga-devel | Mar 28, 2017 | Oct 10, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 26, 2011 |
| Suse | — | Upgrade quaggaUpgrade sap-aio-releaseUpgrade quagga-devel | Feb 17, 2015 | Oct 10, 2011 |
| Ubuntu | — | Upgrade quagga | Nov 8, 2024 | Oct 10, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub