GCVE - cpe:2.3:a:quagga:quagga:0.99.18:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:quagga:quagga:0.99.18:*:*:*:*:*:*:*

part: a version: 0.99.18 update: *

Vendor	Quagga (`462351d8-ef9e-52e9-b528-53d0abcd56ca`)
Product	Quagga (`fa4b65a7-0a78-5470-8581-c87de17acd48`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/quagga/quagga`	purl2cpe	2026-06-01 10:12:22.512690

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-1820`	vulnerable	2026-06-08 05:00:51.028454	Details available The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering (ORF) capability TLV in an OPEN message. Published: 2012-06-13T15:00:00.000Z Updated: 2024-08-06T19:08:38.564Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/962587 http://rhn.redhat.com/errata/RHSA-2012-1259.html http://www.ubuntu.com/usn/USN-1605-1 http://www.debian.org/security/2012/dsa-2497 http://www.securityfocus.com/bid/53775	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0255`	vulnerable	2026-06-08 05:00:40.293183	Details available The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a message associated with a malformed Four-octet AS Number Capability (aka AS4 capability). Published: 2012-04-05T10:00:00.000Z Updated: 2024-08-06T18:16:19.957Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2012-1259.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078910.html http://www.debian.org/security/2012/dsa-2459 http://www.kb.cert.org/vuls/id/551715 http://secunia.com/advisories/48949	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0250`	vulnerable	2026-06-08 05:00:40.282239	Details available Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (daemon crash) via a Link State Update (aka LS Update) packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the value in the Length header field. Published: 2012-04-05T10:00:00.000Z Updated: 2024-08-06T18:16:20.090Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2012-1259.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078910.html http://www.debian.org/security/2012/dsa-2459 http://www.kb.cert.org/vuls/id/551715 http://secunia.com/advisories/48949	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0249`	vulnerable	2026-06-08 05:00:40.280542	Details available Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header. Published: 2012-04-05T10:00:00.000Z Updated: 2024-08-06T18:16:19.939Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2012-1259.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078910.html http://www.debian.org/security/2012/dsa-2459 http://www.kb.cert.org/vuls/id/551715 https://bugzilla.quagga.net/show_bug.cgi?id=705	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.