CVE-2011-3326

(ospfd): Denial of service by decoding Link State Update LSAs of unknown type

Published Oct 10, 2011 CVSS 2.0 · 5.0 Medium EPSS 4.6% KEV · Not listed
Description
The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via an invalid Link State Advertisement (LSA) type in an IPv4 Link State Update message.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2316-1 quagga security update
EUVD EUVD EUVD-2011-3290 The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via an invalid Link State Advertisement (LSA) type in an IPv4 Link State Update message.
Ubuntu USN Ubuntu USN USN-1261-1 Quagga vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
certcc
Published
Updated
Aug 6, 2024, 11:29 PM
Reserved
Aug 29, 2011, 12:00 AM
Status
Modified
Published
Oct 10, 2011, 10:55 AM
Modified
Jun 16, 2026, 11:33 PM
Severity
Low
Public date
Sep 26, 2011, 12:00 AM