Skip to content
OpenAdvisories
Unscored RHSA-2012:1259 9 CVEs

Red Hat Security Advisory: quagga security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::server quagga 0:0.99.15-7.el6_3.2
Red Hat · RHEL 6 enterprise_linux:6::server quagga-contrib 0:0.99.15-7.el6_3.2
Red Hat · RHEL 6 enterprise_linux:6::server quagga-debuginfo 0:0.99.15-7.el6_3.2
Red Hat · RHEL 6 enterprise_linux:6::server quagga-devel 0:0.99.15-7.el6_3.2
Red Hat · RHEL 6 enterprise_linux:6::workstation quagga 0:0.99.15-7.el6_3.2
Red Hat · RHEL 6 enterprise_linux:6::workstation quagga-contrib 0:0.99.15-7.el6_3.2
Red Hat · RHEL 6 enterprise_linux:6::workstation quagga-debuginfo 0:0.99.15-7.el6_3.2
Red Hat · RHEL 6 enterprise_linux:6::workstation quagga-devel 0:0.99.15-7.el6_3.2

Vulnerabilities 9

  • Unscored —
    CVE-2011-3323

    The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (out-…

  • Unscored —
    CVE-2011-3324

    The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows…

  • Unscored —
    CVE-2011-3325

    ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via…

  • Unscored —
    CVE-2011-3326

    The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2011-3327

    Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in Quagga before 0.99.19 all…

  • Unscored —
    CVE-2012-0249

    Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga b…

    quagga Azure Linux
  • Unscored —
    CVE-2012-0250

    Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a den…

    quagga Azure Linux
  • Unscored —
    CVE-2012-0255

    The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, whic…

  • Unscored —
    CVE-2012-1820

    The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of se…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=738393
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=738394
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=738396
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=738398
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=738400
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=802781
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=802827
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=802829
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=817580
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1259.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-3323
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3323
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3323
  • report
    https://access.redhat.com/security/cve/CVE-2011-3324
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3324
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3324
  • report
    https://access.redhat.com/security/cve/CVE-2011-3325
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3325
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3325
  • report
    https://access.redhat.com/security/cve/CVE-2011-3326
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3326
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3326
  • report
    https://access.redhat.com/security/cve/CVE-2011-3327
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3327
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3327
  • report
    https://access.redhat.com/security/cve/CVE-2012-0249
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0249
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0249
  • report
    https://access.redhat.com/security/cve/CVE-2012-0250
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0250
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0250
  • report
    https://access.redhat.com/security/cve/CVE-2012-0255
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0255
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0255
  • report
    https://access.redhat.com/security/cve/CVE-2012-1820
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1820
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1820