CVE-2011-3324
(ospf6d): Denial of service by decoding malformed Database Description packet headers
Severity Score
7.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via trailing zero values in the Link State Advertisement (LSA) header list of an IPv6 Database Description message.
La función ospf6_lsa_is_changed en ospf6_lsa.c en la ejecución de OSPFv3 en ospf6d en Quagga anteriores a v0.99.19 permite a atacantes remotos causar una denegación de servicio (error de aserción y caída del demonio) a través de la inclusión de valores cero en la cabecera de la lista del Link State Advertisement (LSA) de una descripción de mensaje de base de datos.
Quagga is a TCP/IP based routing software suite. The Quagga bgpd daemon implements the BGP routing protocol. The Quagga ospfd and ospf6d daemons implement the OSPF routing protocol. A heap-based buffer overflow flaw was found in the way the bgpd daemon processed malformed Extended Communities path attributes. An attacker could send a specially-crafted BGP message, causing bgpd on a target system to crash or, possibly, execute arbitrary code with the privileges of the user running bgpd. The UPDATE message would have to arrive from an explicitly configured BGP peer, but could have originated elsewhere in the BGP network.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-08-29 CVE Reserved
- 2011-10-05 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-399: Resource Management Errors
CAPEC
References (17)
| URL | Tag | Source |
|---|---|---|
| http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=09395e2a0e93b2cf4258cb1de91887948796bb68 | X_refsource_confirm | |
| http://secunia.com/advisories/46274 | Third Party Advisory | |
| http://secunia.com/advisories/48106 | Third Party Advisory | |
| http://www.kb.cert.org/vuls/id/668534 | Third Party Advisory |
|
| http://www.quagga.net/download/quagga-0.99.19.changelog.txt | X_refsource_confirm | |
| https://www.cert.fi/en/reports/2011/vulnerability539178.html | X_refsource_misc |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | <= 0.99.18 Search vendor "Quagga" for product "Quagga" and version " <= 0.99.18" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.95 Search vendor "Quagga" for product "Quagga" and version "0.95" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.96 Search vendor "Quagga" for product "Quagga" and version "0.96" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.96.1 Search vendor "Quagga" for product "Quagga" and version "0.96.1" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.96.2 Search vendor "Quagga" for product "Quagga" and version "0.96.2" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.96.3 Search vendor "Quagga" for product "Quagga" and version "0.96.3" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.96.4 Search vendor "Quagga" for product "Quagga" and version "0.96.4" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.96.5 Search vendor "Quagga" for product "Quagga" and version "0.96.5" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.97.0 Search vendor "Quagga" for product "Quagga" and version "0.97.0" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.97.1 Search vendor "Quagga" for product "Quagga" and version "0.97.1" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.97.2 Search vendor "Quagga" for product "Quagga" and version "0.97.2" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.97.3 Search vendor "Quagga" for product "Quagga" and version "0.97.3" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.97.4 Search vendor "Quagga" for product "Quagga" and version "0.97.4" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.97.5 Search vendor "Quagga" for product "Quagga" and version "0.97.5" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.98.0 Search vendor "Quagga" for product "Quagga" and version "0.98.0" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.98.1 Search vendor "Quagga" for product "Quagga" and version "0.98.1" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.98.2 Search vendor "Quagga" for product "Quagga" and version "0.98.2" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.98.3 Search vendor "Quagga" for product "Quagga" and version "0.98.3" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.98.4 Search vendor "Quagga" for product "Quagga" and version "0.98.4" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.98.5 Search vendor "Quagga" for product "Quagga" and version "0.98.5" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.98.6 Search vendor "Quagga" for product "Quagga" and version "0.98.6" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.1 Search vendor "Quagga" for product "Quagga" and version "0.99.1" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.2 Search vendor "Quagga" for product "Quagga" and version "0.99.2" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.3 Search vendor "Quagga" for product "Quagga" and version "0.99.3" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.4 Search vendor "Quagga" for product "Quagga" and version "0.99.4" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.5 Search vendor "Quagga" for product "Quagga" and version "0.99.5" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.6 Search vendor "Quagga" for product "Quagga" and version "0.99.6" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.7 Search vendor "Quagga" for product "Quagga" and version "0.99.7" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.8 Search vendor "Quagga" for product "Quagga" and version "0.99.8" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.9 Search vendor "Quagga" for product "Quagga" and version "0.99.9" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.10 Search vendor "Quagga" for product "Quagga" and version "0.99.10" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.11 Search vendor "Quagga" for product "Quagga" and version "0.99.11" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.12 Search vendor "Quagga" for product "Quagga" and version "0.99.12" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.13 Search vendor "Quagga" for product "Quagga" and version "0.99.13" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.14 Search vendor "Quagga" for product "Quagga" and version "0.99.14" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.15 Search vendor "Quagga" for product "Quagga" and version "0.99.15" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.16 Search vendor "Quagga" for product "Quagga" and version "0.99.16" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.17 Search vendor "Quagga" for product "Quagga" and version "0.99.17" | - |
Affected
| ||||||