Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2013-2236

Опубликовано: 24 окт. 2013
Источник: nvd
CVSS2: 2.6
EPSS Низкий

Описание

Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:quagga:quagga:*:*:*:*:*:*:*:*
Версия до 0.99.22.1 (включая)
cpe:2.3:a:quagga:quagga:0.99.22:*:*:*:*:*:*:*

EPSS

Процентиль: 76%
0.00962
Низкий

2.6 Low

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
около 12 лет назад

Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.

CVSS3: 6.5
redhat
больше 12 лет назад

Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.

debian
около 12 лет назад

Stack-based buffer overflow in the new_msg_lsa_change_notify function ...

github
больше 3 лет назад

Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.

oracle-oval
больше 8 лет назад

ELSA-2017-0794: quagga security and bug fix update (MODERATE)

EPSS

Процентиль: 76%
0.00962
Низкий

2.6 Low

CVSS2

Дефекты

CWE-119