Home

CVE-2011-3323

Description

The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (out-of-bounds memory access and daemon crash) via a Link State Update message with an invalid IPv6 prefix length.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
4.487

Associated Vulnerability

VulnerabilityOS Platform
(RHSA-2012:1258) Moderate: quagga security update quagga-0.98.6-7.el5_8.1.i386.rpmLinux
(RHSA-2012:1258) Moderate: quagga security update quagga-0.98.6-7.el5_8.1.x86_64.rpmLinux
(RHSA-2012:1258) Moderate: quagga security update quagga-contrib-0.98.6-7.el5_8.1.i386.rpmLinux
(RHSA-2012:1258) Moderate: quagga security update quagga-contrib-0.98.6-7.el5_8.1.x86_64.rpmLinux
(RHSA-2012:1258) Moderate: quagga security update quagga-devel-0.98.6-7.el5_8.1.i386.rpmLinux
(RHSA-2012:1258) Moderate: quagga security update quagga-devel-0.98.6-7.el5_8.1.x86_64.rpmLinux
Quagga update (ELSA-2017-0794) quagga-0.99.15-14.el6.x86_64.rpmLinux
Quagga-contrib update (ELSA-2017-0794) quagga-contrib-0.99.15-14.el6.x86_64.rpmLinux
Quagga-devel update (ELSA-2017-0794) quagga-devel-0.99.15-14.el6.x86_64.rpmLinux
Quagga update (ELSA-2017-0794) quagga-0.99.15-14.el6.i686.rpmLinux
Quagga-contrib update (ELSA-2017-0794) quagga-contrib-0.99.15-14.el6.i686.rpmLinux
Quagga-devel update (ELSA-2017-0794) quagga-devel-0.99.15-14.el6.i686.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234