CVE-2012-0249: Buffer Overflow
Buffer overflow in the ospflsupdlistlsa function in ospfpacket.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0249?
CVE-2012-0249 has a severity level that indicates it can cause denial of service by exploiting a buffer overflow.
How do I fix CVE-2012-0249?
To fix CVE-2012-0249, upgrade Quagga to version 0.99.20.1 or later.
Which versions of Quagga are affected by CVE-2012-0249?
CVE-2012-0249 affects Quagga versions up to 0.99.20 inclusive and several earlier versions.
Can CVE-2012-0249 be exploited remotely?
Yes, CVE-2012-0249 can be exploited remotely through specially crafted Link State Update packets.
What are the consequences of an exploit leveraging CVE-2012-0249?
Exploiting CVE-2012-0249 can lead to assertion failures and the exit of the ospfd daemon, causing service disruption.