vulnerability

Red Hat: CVE-2016-1245: Moderate: quagga security and bug fix update (RHSA-2017:0794)

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
2016-10-18
Added
2017-03-26
Modified
2021-03-03

Description

It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent.

Solution(s)

redhat-upgrade-quaggaredhat-upgrade-quagga-contribredhat-upgrade-quagga-debuginforedhat-upgrade-quagga-devel
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.