CVE-2012-0250
(ospfd): Crash by processing LS-Update OSPF packet due improper length check of the Network-LSA structures
Severity Score
3.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (daemon crash) via a Link State Update (aka LS Update) packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the value in the Length header field.
Desbordamiento de búfer en la implementación de OSPFv2 en ospfd en Quagga antes de v0.99.20.1 permite a atacantes remotos causar una denegación de servicio (caída del demonio) a través de un paquete de actualización de estado de enlace (también conocido como LS Update) que contiene una anuncio de estado de enlace de una red LSA de longitud es menor que el valor en el campo longitud de la cabecera.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-12-21 CVE Reserved
- 2012-04-05 CVE Published
- 2024-08-06 CVE Updated
- 2024-10-04 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (10)
| URL | Tag | Source |
|---|---|---|
| http://secunia.com/advisories/48949 | Third Party Advisory | |
| http://www.kb.cert.org/vuls/id/551715 | Third Party Advisory |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | <= 0.99.20 Search vendor "Quagga" for product "Quagga" and version " <= 0.99.20" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.1 Search vendor "Quagga" for product "Quagga" and version "0.99.1" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.2 Search vendor "Quagga" for product "Quagga" and version "0.99.2" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.3 Search vendor "Quagga" for product "Quagga" and version "0.99.3" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.4 Search vendor "Quagga" for product "Quagga" and version "0.99.4" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.5 Search vendor "Quagga" for product "Quagga" and version "0.99.5" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.6 Search vendor "Quagga" for product "Quagga" and version "0.99.6" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.7 Search vendor "Quagga" for product "Quagga" and version "0.99.7" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.8 Search vendor "Quagga" for product "Quagga" and version "0.99.8" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.9 Search vendor "Quagga" for product "Quagga" and version "0.99.9" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.10 Search vendor "Quagga" for product "Quagga" and version "0.99.10" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.11 Search vendor "Quagga" for product "Quagga" and version "0.99.11" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.12 Search vendor "Quagga" for product "Quagga" and version "0.99.12" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.13 Search vendor "Quagga" for product "Quagga" and version "0.99.13" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.14 Search vendor "Quagga" for product "Quagga" and version "0.99.14" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.15 Search vendor "Quagga" for product "Quagga" and version "0.99.15" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.16 Search vendor "Quagga" for product "Quagga" and version "0.99.16" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.17 Search vendor "Quagga" for product "Quagga" and version "0.99.17" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.18 Search vendor "Quagga" for product "Quagga" and version "0.99.18" | - |
Affected
| ||||||
| Quagga Search vendor "Quagga" | Quagga Search vendor "Quagga" for product "Quagga" | 0.99.19 Search vendor "Quagga" for product "Quagga" and version "0.99.19" | - |
Affected
| ||||||