CVE-2012-0250
Publication date 5 April 2012
Last updated 24 July 2024
Ubuntu priority
Description
Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (daemon crash) via a Link State Update (aka LS Update) packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the value in the Length header field.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| quagga | 12.04 LTS precise |
Fixed 0.99.20.1-0ubuntu0.12.04.2
|
| 11.10 oneiric |
Fixed 0.99.20.1-0ubuntu0.11.10.2
|
|
| 11.04 natty |
Fixed 0.99.20.1-0ubuntu0.11.04.2
|
|
| 10.10 maverick | Ignored end of life | |
| 10.04 LTS lucid |
Fixed 0.99.20.1-0ubuntu0.10.04.2
|
|
| 8.04 LTS hardy | Ignored end of life |
References
Related Ubuntu Security Notices (USN)
- USN-1441-1
- Quagga vulnerabilities
- 15 May 2012