CVE-2011-3323

(ospf6d): Stack-based buffer overflow while decoding Link State Update packet with malformed Inter Area Prefix LSA

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (out-of-bounds memory access and daemon crash) via a Link State Update message with an invalid IPv6 prefix length.

La implementación de OSPFv3 en ospf6d en Quagga anteriores a v0.99.19 permite a atacantes remotos causar una denegación de servicio (acceso de memoria fuera de rango y la caída del demonio) a través de un mensaje de actualización de enlace del Estado con una longitud de prefijo IPv6 inválida.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

Attack Vector

Adjacent

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2011-08-29 CVE Reserved
2011-10-05 CVE Published
2023-11-08 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-121: Stack-based Buffer Overflow

CAPEC

References (17)

URL	Tag	Source
http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=abc7ef44ca05493500865ce81f7b84f5c4eb6594	X_refsource_confirm
http://secunia.com/advisories/46274	Third Party Advisory
http://secunia.com/advisories/48106	Third Party Advisory
http://www.kb.cert.org/vuls/id/668534	Third Party Advisory
http://www.quagga.net/download/quagga-0.99.19.changelog.txt	X_refsource_confirm
https://www.cert.fi/en/reports/2011/vulnerability539178.html	X_refsource_misc

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00027.html	2023-11-07
http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00007.html	2023-11-07
http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00010.html	2023-11-07
http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html	2023-11-07
http://rhn.redhat.com/errata/RHSA-2012-1258.html	2023-11-07
http://rhn.redhat.com/errata/RHSA-2012-1259.html	2023-11-07
http://secunia.com/advisories/46139	2023-11-07
http://security.gentoo.org/glsa/glsa-201202-02.xml	2023-11-07
http://www.debian.org/security/2011/dsa-2316	2023-11-07
https://access.redhat.com/security/cve/CVE-2011-3323	2012-09-12
https://bugzilla.redhat.com/show_bug.cgi?id=738393	2012-09-12

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				<= 0.99.18 Search vendor "Quagga" for product "Quagga" and version " <= 0.99.18"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.95 Search vendor "Quagga" for product "Quagga" and version "0.95"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.96 Search vendor "Quagga" for product "Quagga" and version "0.96"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.96.1 Search vendor "Quagga" for product "Quagga" and version "0.96.1"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.96.2 Search vendor "Quagga" for product "Quagga" and version "0.96.2"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.96.3 Search vendor "Quagga" for product "Quagga" and version "0.96.3"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.96.4 Search vendor "Quagga" for product "Quagga" and version "0.96.4"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.96.5 Search vendor "Quagga" for product "Quagga" and version "0.96.5"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.97.0 Search vendor "Quagga" for product "Quagga" and version "0.97.0"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.97.1 Search vendor "Quagga" for product "Quagga" and version "0.97.1"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.97.2 Search vendor "Quagga" for product "Quagga" and version "0.97.2"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.97.3 Search vendor "Quagga" for product "Quagga" and version "0.97.3"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.97.4 Search vendor "Quagga" for product "Quagga" and version "0.97.4"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.97.5 Search vendor "Quagga" for product "Quagga" and version "0.97.5"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.98.0 Search vendor "Quagga" for product "Quagga" and version "0.98.0"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.98.1 Search vendor "Quagga" for product "Quagga" and version "0.98.1"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.98.2 Search vendor "Quagga" for product "Quagga" and version "0.98.2"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.98.3 Search vendor "Quagga" for product "Quagga" and version "0.98.3"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.98.4 Search vendor "Quagga" for product "Quagga" and version "0.98.4"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.98.5 Search vendor "Quagga" for product "Quagga" and version "0.98.5"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.98.6 Search vendor "Quagga" for product "Quagga" and version "0.98.6"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.99.1 Search vendor "Quagga" for product "Quagga" and version "0.99.1"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.99.2 Search vendor "Quagga" for product "Quagga" and version "0.99.2"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.99.3 Search vendor "Quagga" for product "Quagga" and version "0.99.3"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.99.4 Search vendor "Quagga" for product "Quagga" and version "0.99.4"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.99.5 Search vendor "Quagga" for product "Quagga" and version "0.99.5"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.99.6 Search vendor "Quagga" for product "Quagga" and version "0.99.6"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.99.7 Search vendor "Quagga" for product "Quagga" and version "0.99.7"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.99.8 Search vendor "Quagga" for product "Quagga" and version "0.99.8"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.99.9 Search vendor "Quagga" for product "Quagga" and version "0.99.9"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.99.10 Search vendor "Quagga" for product "Quagga" and version "0.99.10"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.99.11 Search vendor "Quagga" for product "Quagga" and version "0.99.11"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.99.12 Search vendor "Quagga" for product "Quagga" and version "0.99.12"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.99.13 Search vendor "Quagga" for product "Quagga" and version "0.99.13"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.99.14 Search vendor "Quagga" for product "Quagga" and version "0.99.14"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.99.15 Search vendor "Quagga" for product "Quagga" and version "0.99.15"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.99.16 Search vendor "Quagga" for product "Quagga" and version "0.99.16"		-		Affected
Quagga Search vendor "Quagga"		Quagga Search vendor "Quagga" for product "Quagga"				0.99.17 Search vendor "Quagga" for product "Quagga" and version "0.99.17"		-		Affected