CVE-2012-0249

Publication date 5 April 2012

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.

Status

Package Ubuntu Release Status
quagga 12.04 LTS precise
Fixed 0.99.20.1-0ubuntu0.12.04.2
11.10 oneiric
Fixed 0.99.20.1-0ubuntu0.11.10.2
11.04 natty
Fixed 0.99.20.1-0ubuntu0.11.04.2
10.10 maverick Ignored end of life
10.04 LTS lucid
Fixed 0.99.20.1-0ubuntu0.10.04.2
8.04 LTS hardy Ignored end of life

References

Related Ubuntu Security Notices (USN)

Other references