Total vulnerabilities in the database
Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.
Software | From | Fixed in |
---|---|---|
quagga / quagga | - | 0.99.22.1.x |
quagga / quagga | 0.99.22 | 0.99.22.x |