CVE catalog

CVE-2012-0250

quagga - several

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.30% · Oct 25, 2026

Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (daemon crash) via a Link State Update (aka LS Update) packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the value in the Length header field. (ospfd): Crash by processing LS-Update OSPF packet due improper length check of the Network-LSA structures The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianquagga6.00.99.17-2vulnerable
Debianquagga6.00.99.17-2+squeeze2vulnerable
Debianquagga6.00.99.17-2+squeeze3vulnerable
Debianquagga6.00.99.17-3vulnerable
Debianquagga6.00.99.17-4vulnerable
Debianquagga6.00.99.18-1vulnerable
Debianquagga6.00.99.18-2vulnerable
Debianquagga6.00.99.19-1vulnerable
Debianquagga6.00.99.20-1vulnerable
Debianquagga6.00.99.20-1~bpo60+1vulnerable
Debianquagga6.00.99.20-2vulnerable
Debianquagga6.00.99.20-3vulnerable
Debianquagga6.00.99.20-4vulnerable
Debianquagga6.00.99.20.1-0+squeeze1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianquaggadeb6.00.99.20.1-0+squeeze1Not reportedDSA-2459-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]