Skip to content
OpenAdvisories
Unscored RHSA-2012:1258 8 CVEs

Red Hat Security Advisory: quagga security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client quagga 0:0.98.6-7.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::client quagga-contrib 0:0.98.6-7.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::client quagga-debuginfo 0:0.98.6-7.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation quagga 0:0.98.6-7.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation quagga-debuginfo 0:0.98.6-7.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation quagga-devel 0:0.98.6-7.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::server quagga 0:0.98.6-7.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::server quagga-contrib 0:0.98.6-7.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::server quagga-debuginfo 0:0.98.6-7.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::server quagga-devel 0:0.98.6-7.el5_8.1

Vulnerabilities 8

  • Unscored —
    CVE-2010-1674 EPSS 13%

    The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NU…

  • Unscored —
    CVE-2011-3323

    The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (out-…

  • Unscored —
    CVE-2011-3324

    The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows…

  • Unscored —
    CVE-2011-3325

    ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via…

  • Unscored —
    CVE-2011-3326

    The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2011-3327

    Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in Quagga before 0.99.19 all…

  • Unscored —
    CVE-2012-0249

    Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga b…

    quagga Azure Linux
  • Unscored —
    CVE-2012-0250

    Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a den…

    quagga Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=654603
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=738393
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=738394
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=738396
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=738398
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=738400
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=802827
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=802829
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1258.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-1674
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1674
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1674
  • report
    https://access.redhat.com/security/cve/CVE-2011-3323
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3323
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3323
  • report
    https://access.redhat.com/security/cve/CVE-2011-3324
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3324
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3324
  • report
    https://access.redhat.com/security/cve/CVE-2011-3325
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3325
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3325
  • report
    https://access.redhat.com/security/cve/CVE-2011-3326
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3326
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3326
  • report
    https://access.redhat.com/security/cve/CVE-2011-3327
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3327
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3327
  • report
    https://access.redhat.com/security/cve/CVE-2012-0249
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0249
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0249
  • report
    https://access.redhat.com/security/cve/CVE-2012-0250
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0250
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0250