CVE catalog

CVE-2013-2236

UBUNTU-CVE-2013-2236

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.08% · Oct 25, 2026

A stack-based buffer overflow flaw was found in the way the Quagga OSPFD daemon handled LSA (link-state advertisement) packets. A remote attacker could use this flaw to crash the ospfd daemon resulting in denial of service. Quagga: OSPFD Potential remote code exec (stack based buffer overflow) The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianquagga6.00.99.17-2vulnerable
Debianquagga6.00.99.17-2+squeeze2vulnerable
Debianquagga6.00.99.17-2+squeeze3vulnerable
Debianquagga6.00.99.17-3vulnerable
Debianquagga6.00.99.17-4vulnerable
Debianquagga6.00.99.18-1vulnerable
Debianquagga6.00.99.18-2vulnerable
Debianquagga6.00.99.19-1vulnerable
Debianquagga6.00.99.20-1vulnerable
Debianquagga6.00.99.20-1~bpo60+1vulnerable
Debianquagga6.00.99.20-2vulnerable
Debianquagga6.00.99.20-3vulnerable
Debianquagga6.00.99.20-4vulnerable
Debianquagga6.00.99.20.1-0+squeeze1vulnerable
Debianquagga6.00.99.20.1-0+squeeze2vulnerable
Debianquagga6.00.99.20.1-0+squeeze3vulnerable
Debianquagga6.00.99.20.1-0+squeeze4vulnerable
Debianquagga6.00.99.20.1-0+squeeze5fixed
Debianquagga70.99.21-4+wheezy1vulnerable
Debianquagga70.99.21-4+wheezy2vulnerable
Debianquagga70.99.22-1vulnerable
Debianquagga70.99.22.1-1vulnerable
Debianquagga70.99.22.1-2vulnerable
Debianquagga70.99.22.4-1vulnerable
Debianquagga70.99.22.4-1+wheezy1fixed
Ubuntuquagga14.040.99.22.1-2vulnerable
Ubuntuquagga14.040.99.22.4-1vulnerable
Ubuntuquagga14.040.99.22.4-2vulnerable
Ubuntuquagga14.040.99.22.4-3vulnerable
Ubuntuquagga14.040.99.22.4-3ubuntu1vulnerable
Ubuntuquagga14.040.99.22.4-3ubuntu1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianquaggadeb6.00.99.20.1-0+squeeze5Not reportedDSA-2803-1Not reported
Debianquaggadeb70.99.22.4-1+wheezy1Not reportedDSA-2803-1Not reported
Ubuntuquaggadeb14.040.99.22.4-3ubuntu1.1Not reportedUSN-2941-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]