Description
The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via an invalid Link State Advertisement (LSA) type in an IPv4 Link State Update message.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 6.0 | quagga | 0.99.17-2+squeeze3 | DSA-2316-1 |
| Debian 5.0 | quagga | 0.99.10-1lenny6 | DSA-2316-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | quagga +2 | 0.99.15-7.el6_3.2 | RHSA-2012:1259 |
| RHEL 5 | quagga +2 | 0.98.6-7.el5_8.1 | RHSA-2012:1258 |
Advisories 3
- RHSA-2012:1259 Red Hat Security Advisory: quagga security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2012:1258 Red Hat Security Advisory: quagga security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-2316-1 quagga - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- http://www.quagga.net/download/quagga-0.99.19.changelog.txt
- VU#668534 third-party-advisory
- DSA-2316 vendor-advisory
- RHSA-2012:1259 vendor-advisory
- https://www.cert.fi/en/reports/2011/vulnerability539178.html
- 46139 third-party-advisory
- SUSE-SU-2011:1075 vendor-advisory
- openSUSE-SU-2011:1155 vendor-advisory
- GLSA-201202-02 vendor-advisory
- RHSA-2012:1258 vendor-advisory
- SUSE-SU-2011:1316 vendor-advisory
- 46274 third-party-advisory
- 48106 third-party-advisory
- http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=6b161fc12a15aba8824c84d1eb38e529aaf70769
- SUSE-SU-2011:1171 vendor-advisory