CVE-2011-3325: Medium severity quagga routing software suite vulnerability
A denial of service flaw was found in the way the ospfd daemon of the Quagga routing suire processes malformed Hello packets (not complete Hello packets of Hello packets with invalid OSPFv2 header type). A configured OSPF peer, could use this flaw to cause the master OSPF daemon (ospfd) to crash.
Other sources
ospfpacket.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet.
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2011-3325?
CVE-2011-3325 is classified as a denial of service vulnerability due to its ability to crash the ospfd daemon.
How can I fix CVE-2011-3325?
To fix CVE-2011-3325, update the Quagga routing software to versions 0.99.19 or higher, or 0:0.98.6-7.el5_8.1, or 0:0.99.15-7.el6_3.2.
Which versions of Quagga are affected by CVE-2011-3325?
CVE-2011-3325 affects multiple versions of Quagga up to 0.99.18, including versions 0.95 through 0.99.18.
Who can exploit CVE-2011-3325?
A configured OSPF peer can exploit CVE-2011-3325 by sending malformed Hello packets to the ospfd daemon.
What systems are vulnerable to CVE-2011-3325?
Any system running vulnerable versions of the Quagga routing software is susceptible to CVE-2011-3325.