NetSight
IP …
low3.3

CVE-2012-0249

Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers …

Impact

Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.

Affected products

VendorProductAffected versions
QuaggaQuagga
through 0.99.20
Versions 0.95, 0.96, 0.96.1, 0.96.2, 0.96.3

Weakness classification

CWE-119

References