Unscored DSA-2803-1 2 CVEs

quagga - several

Published Nov 26, 2013 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 6.0	quagga	0.99.20.1-0+squeeze5
Debian · 7	quagga	0.99.22.4-1+wheezy1

Vulnerabilities 2

Unscored —

CVE-2013-2236

Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.…

Oct 24, 2013
Unscored —

CVE-2013-6051

The bgp_attr_unknown function in bgp_attr.c in Quagga 0.99.21 does not properly initialize the total variable, which al…

Dec 14, 2013