Summary
David Lamparter discovered that Quagga incorrectly handled certain IPv6
router advertisements. A remote attacker could possibly use this issue to
cause Quagga to crash, resulting in a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | quagga | 0.99.22.4-3ubuntu1.3 |
| Ubuntu · 16.04 LTS 16.04:LTS | quagga | 0.99.24.1-2ubuntu1.2 |
Vulnerabilities 1
-
Unscored —
It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when …
References
-
report
https://ubuntu.com/security/CVE-2016-1245