Description
The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via trailing zero values in the Link State Advertisement (LSA) header list of an IPv6 Database Description message.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 6.0 | quagga | 0.99.17-2+squeeze3 | DSA-2316-1 |
| Debian 5.0 | quagga | 0.99.10-1lenny6 | DSA-2316-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | quagga +2 | 0.99.15-7.el6_3.2 | RHSA-2012:1259 |
| RHEL 5 | quagga +2 | 0.98.6-7.el5_8.1 | RHSA-2012:1258 |
Advisories 3
- RHSA-2012:1259 Red Hat Security Advisory: quagga security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2012:1258 Red Hat Security Advisory: quagga security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-2316-1 quagga - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- http://www.quagga.net/download/quagga-0.99.19.changelog.txt
- VU#668534 third-party-advisory
- http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=09395e2a0e93b2cf4258cb1de91887948796bb68
- DSA-2316 vendor-advisory
- RHSA-2012:1259 vendor-advisory
- https://www.cert.fi/en/reports/2011/vulnerability539178.html
- 46139 third-party-advisory
- SUSE-SU-2011:1075 vendor-advisory
- openSUSE-SU-2011:1155 vendor-advisory
- GLSA-201202-02 vendor-advisory
- RHSA-2012:1258 vendor-advisory
- SUSE-SU-2011:1316 vendor-advisory
- 46274 third-party-advisory
- 48106 third-party-advisory
- SUSE-SU-2011:1171 vendor-advisory