CVE catalog

CVE-2016-4049

Security update for quagga

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
4.64% · Oct 27, 2026

A denial of service flaw was found in the Quagga BGP routing daemon (bgpd). Under certain circumstances, a remote attacker could send a crafted packet to crash the bgpd daemon resulting in denial of service. quagga: denial of service vulnerability in BGP routing daemon The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianquagga70.99.21-4+wheezy1vulnerable
Debianquagga70.99.21-4+wheezy2vulnerable
Debianquagga70.99.22-1vulnerable
Debianquagga70.99.22.1-1vulnerable
Debianquagga70.99.22.1-2vulnerable
Debianquagga70.99.22.4-1vulnerable
Debianquagga70.99.22.4-1+wheezy1vulnerable
Debianquagga70.99.22.4-1+wheezy2vulnerable
Debianquagga70.99.22.4-1+wheezy3fixed
Ubuntuquagga14.040.99.22.1-2vulnerable
Ubuntuquagga14.040.99.22.4-1vulnerable
Ubuntuquagga14.040.99.22.4-2vulnerable
Ubuntuquagga14.040.99.22.4-3vulnerable
Ubuntuquagga14.040.99.22.4-3ubuntu1vulnerable
Ubuntuquagga14.040.99.22.4-3ubuntu1.1vulnerable
Ubuntuquagga14.040.99.22.4-3ubuntu1.2fixed
Ubuntuquagga16.040.99.24.1-2vulnerable
Ubuntuquagga16.040.99.24.1-2ubuntu1vulnerable
Ubuntuquagga16.040.99.24.1-2ubuntu1.1fixed
Susequaggalinux enterprise software development kit 120.99.22.1-12.1fixed
Susequaggalinux enterprise software development kit 12 sp10.99.22.1-12.1fixed
Susequaggalinux enterprise server 120.99.22.1-12.1fixed
Susequaggalinux enterprise server for sap applications 120.99.22.1-12.1fixed
Susequaggalinux enterprise server 12 sp10.99.22.1-12.1fixed
Susequaggalinux enterprise server for sap applications 12 sp10.99.22.1-12.1fixed
Susequaggalinux enterprise software development kit 11 sp40.99.15-0.24.2fixed
Susequaggalinux enterprise server 11 sp40.99.15-0.24.2fixed
Susequaggalinux enterprise server for sap applications 11 sp40.99.15-0.24.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianquaggadeb70.99.22.4-1+wheezy3Not reportedDLA-601-1Not reported
Ubuntuquaggadeb14.040.99.22.4-3ubuntu1.2Not reportedUBUNTU-CVE-2016-4049Not reported
Ubuntuquaggadeb16.040.99.24.1-2ubuntu1.1Not reportedUBUNTU-CVE-2016-4049Not reported
Susequaggarpmlinux enterprise software development kit 120.99.22.1-12.1Not reportedSUSE-SU-2016:1482-1Not reported
Susequaggarpmlinux enterprise software development kit 12 sp10.99.22.1-12.1Not reportedSUSE-SU-2016:1482-1Not reported
Susequaggarpmlinux enterprise server 120.99.22.1-12.1Not reportedSUSE-SU-2016:1482-1Not reported
Susequaggarpmlinux enterprise server for sap applications 120.99.22.1-12.1Not reportedSUSE-SU-2016:1482-1Not reported
Susequaggarpmlinux enterprise server 12 sp10.99.22.1-12.1Not reportedSUSE-SU-2016:1482-1Not reported
Susequaggarpmlinux enterprise server for sap applications 12 sp10.99.22.1-12.1Not reportedSUSE-SU-2016:1482-1Not reported
Susequaggarpmlinux enterprise software development kit 11 sp40.99.15-0.24.2Not reportedSUSE-SU-2016:1483-1Not reported
Susequaggarpmlinux enterprise server 11 sp40.99.15-0.24.2Not reportedSUSE-SU-2016:1483-1Not reported
Susequaggarpmlinux enterprise server for sap applications 11 sp40.99.15-0.24.2Not reportedSUSE-SU-2016:1483-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]