vulnerability
Red Hat: CVE-2016-1245: Moderate: quagga security and bug fix update (RHSA-2017:0794)
Severity | CVSS | Published | Added | Modified |
---|---|---|---|---|
8 | (AV:N/AC:L/Au:N/C:P/I:P/A:P) | 2016-10-18 | 2017-03-26 | 2021-03-03 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
2016-10-18
Added
2017-03-26
Modified
2021-03-03
Description
It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent.
Solution(s)
redhat-upgrade-quaggaredhat-upgrade-quagga-contribredhat-upgrade-quagga-debuginforedhat-upgrade-quagga-devel

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.