Approved changes feed: RSS · Atom

cpe:2.3:a:quagga:quagga:0.98.1:*:*:*:*:*:*:*

part: a version: 0.98.1 update: *

VendorQuagga (462351d8-ef9e-52e9-b528-53d0abcd56ca)
ProductQuagga (fa4b65a7-0a78-5470-8581-c87de17acd48)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/quagga/quagga purl2cpe 2026-06-01 10:12:22.512665

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-1820 vulnerable 2026-06-08 05:00:51.028054 Details available
The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering (ORF) capability TLV in an OPEN message.
Published: 2012-06-13T15:00:00.000Z
Updated: 2024-08-06T19:08:38.564Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0255 vulnerable 2026-06-08 05:00:40.292459 Details available
The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a message associated with a malformed Four-octet AS Number Capability (aka AS4 capability).
Published: 2012-04-05T10:00:00.000Z
Updated: 2024-08-06T18:16:19.957Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0249 vulnerable 2026-06-08 05:00:40.268115 Details available
Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.
Published: 2012-04-05T10:00:00.000Z
Updated: 2024-08-06T18:16:19.939Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3327 vulnerable 2026-06-08 04:59:24.645521 Details available
Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by sending a crafted BGP UPDATE message over IPv4.
Published: 2011-10-10T10:00:00.000Z
Updated: 2024-08-06T23:29:56.884Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3326 vulnerable 2026-06-08 04:59:24.644060 Details available
The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via an invalid Link State Advertisement (LSA) type in an IPv4 Link State Update message.
Published: 2011-10-10T10:00:00.000Z
Updated: 2024-08-06T23:29:56.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3325 vulnerable 2026-06-08 04:59:24.642649 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3324 vulnerable 2026-06-08 04:59:24.641039 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3323 vulnerable 2026-06-08 04:59:24.623003 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2949 vulnerable 2026-06-08 04:55:11.761961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2948 vulnerable 2026-06-08 04:55:11.749456 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1675 vulnerable 2026-06-08 04:54:09.859724 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1674 vulnerable 2026-06-08 04:54:09.847580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1572 vulnerable 2026-06-08 04:51:24.012207 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4826 vulnerable 2026-06-08 04:49:57.289995 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1995 vulnerable 2026-06-08 04:49:43.952948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.