Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2013-2236

Опубликовано: 24 окт. 2013
Источник: nvd
CVSS2: 2.6
EPSS Низкий

Описание

Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:quagga:quagga:*:*:*:*:*:*:*:*
Версия до 0.99.22.1 (включая)
cpe:2.3:a:quagga:quagga:0.99.22:*:*:*:*:*:*:*

EPSS

Процентиль: 82%
0.0208
Низкий

2.6 Low

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
около 13 лет назад

Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.

CVSS3: 6.5
redhat
больше 13 лет назад

Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.

debian
около 13 лет назад

Stack-based buffer overflow in the new_msg_lsa_change_notify function ...

github
больше 4 лет назад

Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.

altlinux
около 12 лет назад

ALT-PU-2014-2059: package `quagga` update to version 0.99.23.1-alt1

EPSS

Процентиль: 82%
0.0208
Низкий

2.6 Low

CVSS2

Дефекты

CWE-119