Riku Hietamaki, Tuomo Untinen and Jukka Taimisto discovered several vulnerabilities in Quagga, an Internet routing daemon :

  - CVE-2011-3323     A stack-based buffer overflow while decoding Link State     Update packets with a malformed Inter Area Prefix LSA     can cause the ospf6d process to crash or (potentially)     execute arbitrary code.

  - CVE-2011-3324     The ospf6d process can crash while processing a Database     Description packet with a crafted     Link-State-Advertisement.

  - CVE-2011-3325     The ospfd process can crash while processing a crafted     Hello packet.

  - CVE-2011-3326     The ospfd process crashes while processing     Link-State-Advertisements of a type not known to Quagga.

  - CVE-2011-3327     A heap-based buffer overflow while processing BGP UPDATE     messages containing an Extended Communities path     attribute can cause the bgpd process to crash or     (potentially) execute arbitrary code.

The OSPF-related vulnerabilities require that potential attackers send packets to a vulnerable Quagga router; the packets are not distributed over OSPF. In contrast, the BGP UPDATE messages could be propagated by some routers.

This update fixes the following security issues :

  - 718056: OSPF6D buffer overflow while decoding Link State     Update with Inter Area Prefix Lsa. (CVE-2011-3323)

  - 718058: OSPF6D DoS while decoding Database Description     packet. (CVE-2011-3324)

  - 718059: OSPFD DoS while decoding Hello packet.
    (CVE-2011-3325)

  - 718061: OSPFD DoS while decoding Link State Update.
    (CVE-2011-3326)

  - 718062: DoS while decoding EXTENDED_COMMUNITIES in     Quagga's BGP. (CVE-2011-3327)

This update fixes the following security issues :

  - 718056: OSPF6D buffer overflow while decoding Link State     Update with Inter Area Prefix Lsa. (CVE-2011-3323)

  - 718058: OSPF6D DoS while decoding Database Description     packet. (CVE-2011-3324)

  - 718059: OSPFD DoS while decoding Hello packet.
    (CVE-2011-3325)

  - 718061: OSPFD DoS while decoding Link State Update.
    (CVE-2011-3326)

  - 718062: DoS while decoding EXTENDED_COMMUNITIES in     Quagga's BGP (CVE-2011-3327)

According to its self-reported version number, the installation of Quagga listening on the remote host is affected by multiple vulnerabilities :

  - A denial of service vulnerability in OSPF6D can be     triggered by a specially crafted Link Status Update     message with an invalid IPv6 prefix length.
    (CVE-2011-3323)

  - A denial of service vulnerability in OSPF6D can be     triggered by a specially crafted IPv6 Database     Description message with trailing zero values in the     Link State Advertisement header list. (CVE-2011-3324)

  - A denial of service vulnerability in OSPFD can be     triggered by a 0x0A type field in an IPv4 packet header     or a truncated IPv4 Hello packet. (CVE-2011-3325)

  - A denial of service vulnerability in OSPFD can be     triggered by a specially crafted IPv4 Link State Update     message with an invalid Link State Advertisement type.
    (CVE-2011-3326)

  - A heap-based buffer overflow in BGPD can be triggered by     a specially crafted UPDATE message over IPv4.
    (CVE-2011-3326)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
56394	Debian DSA-2316-1 : quagga - several vulnerabilities	Nessus	Debian Local Security Checks	2011/10/6	2021/1/11	high
56615	SuSE 10 Security Update : quagga (ZYPP Patch Number 7767)	Nessus	SuSE Local Security Checks	2011/10/24	2021/1/19	high
57131	SuSE 11.1 Security Update : quagga (SAT Patch Number 5169)	Nessus	SuSE Local Security Checks	2011/12/13	2021/1/19	high
59790	Quagga < 0.99.19 Multiple Vulnerabilities	Nessus	Misc.	2012/6/29	2019/12/4	high

检测

插件搜索

high

high

high

high