Approved changes feed: RSS · Atom

cpe:2.3:a:quagga:quagga:0.99.11:*:*:*:*:*:*:*

part: a version: 0.99.11 update: *

VendorQuagga (462351d8-ef9e-52e9-b528-53d0abcd56ca)
ProductQuagga (fa4b65a7-0a78-5470-8581-c87de17acd48)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/quagga/quagga purl2cpe 2026-06-01 10:12:22.512678

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-1820 vulnerable 2026-06-08 05:00:51.028331 Details available
The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering (ORF) capability TLV in an OPEN message.
Published: 2012-06-13T15:00:00.000Z
Updated: 2024-08-06T19:08:38.564Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0255 vulnerable 2026-06-08 05:00:40.292973 Details available
The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a message associated with a malformed Four-octet AS Number Capability (aka AS4 capability).
Published: 2012-04-05T10:00:00.000Z
Updated: 2024-08-06T18:16:19.957Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0250 vulnerable 2026-06-08 05:00:40.282039 Details available
Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (daemon crash) via a Link State Update (aka LS Update) packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the value in the Length header field.
Published: 2012-04-05T10:00:00.000Z
Updated: 2024-08-06T18:16:20.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0249 vulnerable 2026-06-08 05:00:40.276875 Details available
Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.
Published: 2012-04-05T10:00:00.000Z
Updated: 2024-08-06T18:16:19.939Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3327 vulnerable 2026-06-08 04:59:24.645786 Details available
Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by sending a crafted BGP UPDATE message over IPv4.
Published: 2011-10-10T10:00:00.000Z
Updated: 2024-08-06T23:29:56.884Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3326 vulnerable 2026-06-08 04:59:24.644326 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3325 vulnerable 2026-06-08 04:59:24.642920 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3324 vulnerable 2026-06-08 04:59:24.641406 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3323 vulnerable 2026-06-08 04:59:24.636494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2949 vulnerable 2026-06-08 04:55:11.762227 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2948 vulnerable 2026-06-08 04:55:11.758863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1675 vulnerable 2026-06-08 04:54:09.859982 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1674 vulnerable 2026-06-08 04:54:09.855766 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.