CVE-2012-0250: Buffer Overflow
Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (daemon crash) via a Link State Update (aka LS Update) packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the value in the Length header field.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0250?
CVE-2012-0250 has a severity rating that classifies it as a denial of service vulnerability.
How do I fix CVE-2012-0250?
To fix CVE-2012-0250, upgrade to Quagga version 0.99.20.1 or later.
What systems are affected by CVE-2012-0250?
The vulnerability impacts Quagga versions up to 0.99.20, including specific earlier versions like 0.99.1 through 0.99.19.
What kind of attack does CVE-2012-0250 facilitate?
CVE-2012-0250 allows remote attackers to execute a denial of service attack by sending specially crafted Link State Update packets.
What is the impact of CVE-2012-0250 on affected systems?
The impact of CVE-2012-0250 is that it causes the ospfd daemon to crash, leading to service interruptions.