Action not permitted
Modal body text goes here.
Modal Title
Modal Body
cve-2011-3325
Vulnerability from cvelistv5
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-06T23:29:56.718Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://www.quagga.net/download/quagga-0.99.19.changelog.txt", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=61ab0301606053192f45c188bc48afc837518770", }, { name: "VU#668534", tags: [ "third-party-advisory", "x_refsource_CERT-VN", "x_transferred", ], url: "http://www.kb.cert.org/vuls/id/668534", }, { name: "DSA-2316", tags: [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred", ], url: "http://www.debian.org/security/2011/dsa-2316", }, { name: "RHSA-2012:1259", tags: [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred", ], url: "http://rhn.redhat.com/errata/RHSA-2012-1259.html", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=717750433839762d23a5f8d88fe0b4d57c8d490a", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://www.cert.fi/en/reports/2011/vulnerability539178.html", }, { name: "46139", tags: [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred", ], url: "http://secunia.com/advisories/46139", }, { name: "SUSE-SU-2011:1075", tags: [ "vendor-advisory", "x_refsource_SUSE", "x_transferred", ], url: "http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00027.html", }, { name: "openSUSE-SU-2011:1155", tags: [ "vendor-advisory", "x_refsource_SUSE", "x_transferred", ], url: "http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00007.html", }, { name: "GLSA-201202-02", tags: [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred", ], url: "http://security.gentoo.org/glsa/glsa-201202-02.xml", }, { name: "RHSA-2012:1258", tags: [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred", ], url: "http://rhn.redhat.com/errata/RHSA-2012-1258.html", }, { name: "SUSE-SU-2011:1316", tags: [ "vendor-advisory", "x_refsource_SUSE", "x_transferred", ], url: "http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html", }, { name: "46274", tags: [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred", ], url: "http://secunia.com/advisories/46274", }, { name: "48106", tags: [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred", ], url: "http://secunia.com/advisories/48106", }, { name: "SUSE-SU-2011:1171", tags: [ "vendor-advisory", "x_refsource_SUSE", "x_transferred", ], url: "http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00010.html", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], datePublic: "2011-09-26T00:00:00", descriptions: [ { lang: "en", value: "ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2018-01-05T18:57:01", orgId: "37e5125f-f79b-445b-8fad-9564f167944b", shortName: "certcc", }, references: [ { tags: [ "x_refsource_CONFIRM", ], url: "http://www.quagga.net/download/quagga-0.99.19.changelog.txt", }, { tags: [ "x_refsource_CONFIRM", ], url: "http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=61ab0301606053192f45c188bc48afc837518770", }, { name: "VU#668534", tags: [ "third-party-advisory", "x_refsource_CERT-VN", ], url: "http://www.kb.cert.org/vuls/id/668534", }, { name: "DSA-2316", tags: [ "vendor-advisory", "x_refsource_DEBIAN", ], url: "http://www.debian.org/security/2011/dsa-2316", }, { name: "RHSA-2012:1259", tags: [ "vendor-advisory", "x_refsource_REDHAT", ], url: "http://rhn.redhat.com/errata/RHSA-2012-1259.html", }, { tags: [ "x_refsource_CONFIRM", ], url: "http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=717750433839762d23a5f8d88fe0b4d57c8d490a", }, { tags: [ "x_refsource_MISC", ], url: "https://www.cert.fi/en/reports/2011/vulnerability539178.html", }, { name: "46139", tags: [ "third-party-advisory", "x_refsource_SECUNIA", ], url: "http://secunia.com/advisories/46139", }, { name: "SUSE-SU-2011:1075", tags: [ "vendor-advisory", "x_refsource_SUSE", ], url: "http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00027.html", }, { name: "openSUSE-SU-2011:1155", tags: [ "vendor-advisory", "x_refsource_SUSE", ], url: "http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00007.html", }, { name: "GLSA-201202-02", tags: [ "vendor-advisory", "x_refsource_GENTOO", ], url: "http://security.gentoo.org/glsa/glsa-201202-02.xml", }, { name: "RHSA-2012:1258", tags: [ "vendor-advisory", "x_refsource_REDHAT", ], url: "http://rhn.redhat.com/errata/RHSA-2012-1258.html", }, { name: "SUSE-SU-2011:1316", tags: [ "vendor-advisory", "x_refsource_SUSE", ], url: "http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html", }, { name: "46274", tags: [ "third-party-advisory", "x_refsource_SECUNIA", ], url: "http://secunia.com/advisories/46274", }, { name: "48106", tags: [ "third-party-advisory", "x_refsource_SECUNIA", ], url: "http://secunia.com/advisories/48106", }, { name: "SUSE-SU-2011:1171", tags: [ "vendor-advisory", "x_refsource_SUSE", ], url: "http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00010.html", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "cert@cert.org", ID: "CVE-2011-3325", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "http://www.quagga.net/download/quagga-0.99.19.changelog.txt", refsource: "CONFIRM", url: "http://www.quagga.net/download/quagga-0.99.19.changelog.txt", }, { name: "http://code.quagga.net/?p=quagga.git;a=commit;h=61ab0301606053192f45c188bc48afc837518770", refsource: "CONFIRM", url: "http://code.quagga.net/?p=quagga.git;a=commit;h=61ab0301606053192f45c188bc48afc837518770", }, { name: "VU#668534", refsource: "CERT-VN", url: "http://www.kb.cert.org/vuls/id/668534", }, { name: "DSA-2316", refsource: "DEBIAN", url: "http://www.debian.org/security/2011/dsa-2316", }, { name: "RHSA-2012:1259", refsource: "REDHAT", url: "http://rhn.redhat.com/errata/RHSA-2012-1259.html", }, { name: "http://code.quagga.net/?p=quagga.git;a=commit;h=717750433839762d23a5f8d88fe0b4d57c8d490a", refsource: "CONFIRM", url: "http://code.quagga.net/?p=quagga.git;a=commit;h=717750433839762d23a5f8d88fe0b4d57c8d490a", }, { name: "https://www.cert.fi/en/reports/2011/vulnerability539178.html", refsource: "MISC", url: "https://www.cert.fi/en/reports/2011/vulnerability539178.html", }, { name: "46139", refsource: "SECUNIA", url: "http://secunia.com/advisories/46139", }, { name: "SUSE-SU-2011:1075", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00027.html", }, { name: "openSUSE-SU-2011:1155", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00007.html", }, { name: "GLSA-201202-02", refsource: "GENTOO", url: "http://security.gentoo.org/glsa/glsa-201202-02.xml", }, { name: "RHSA-2012:1258", refsource: "REDHAT", url: "http://rhn.redhat.com/errata/RHSA-2012-1258.html", }, { name: "SUSE-SU-2011:1316", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html", }, { name: "46274", refsource: "SECUNIA", url: "http://secunia.com/advisories/46274", }, { name: "48106", refsource: "SECUNIA", url: "http://secunia.com/advisories/48106", }, { name: "SUSE-SU-2011:1171", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00010.html", }, { name: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", refsource: "CONFIRM", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "37e5125f-f79b-445b-8fad-9564f167944b", assignerShortName: "certcc", cveId: "CVE-2011-3325", datePublished: "2011-10-10T10:00:00", dateReserved: "2011-08-29T00:00:00", dateUpdated: "2024-08-06T23:29:56.718Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", "vulnerability-lookup:meta": { nvd: "{\"cve\":{\"id\":\"CVE-2011-3325\",\"sourceIdentifier\":\"cret@cert.org\",\"published\":\"2011-10-10T10:55:06.503\",\"lastModified\":\"2024-11-21T01:30:16.137\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet.\"},{\"lang\":\"es\",\"value\":\"ospf_packet.c en ospfd en Quagga anterior a v0.99.19 permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través (1) un tipo de campo 0x0a en una cabecera del paquete en IPv4 o (2) un paquete Hello IPv4 truncado.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-399\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"0.99.18\",\"matchCriteriaId\":\"CDFDF175-4863-4A33-88CA-3539A3D2B936\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.95:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD7A8AD5-A315-4242-960C-05E792B30547\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.96:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B83BCE2-24D0-4B5B-A034-62BFF1894AE2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.96.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FDD63DD9-1809-4CEC-AB69-955A7B127CA8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.96.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A2AD1AD-DDE2-477B-8EFD-767B6FD8EDBB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.96.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"99BD881B-9B53-4E12-B083-87C9C87CDF62\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.96.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F910313F-FFE1-470A-A9B6-8A854C73DC97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.96.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9B0A9232-968D-4D3E-82A0-F5CC858EAF48\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.97.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD5F4CFB-BE1F-4424-8D2F-B921704E3AA0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.97.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3A55FF13-8E56-4A27-B7FD-A855735E1045\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.97.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F7DDBC3B-99BB-4404-9A73-90ED6581D69A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.97.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AB09A713-E91E-44E7-8B82-F70F655A97B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.97.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"10173750-690B-4576-AB3F-11A0861AA78B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.97.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0EF8693A-D561-4D2E-BD60-5630601C6A94\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.98.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BE43983A-73CB-41A5-889B-1AEA9A27F440\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.98.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6EB589E9-85C0-4E87-856B-A2832383B129\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.98.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7CF5EB8A-8E46-4490-BA88-03D4BED3EB84\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.98.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C6445BEF-245C-47CE-9779-96C97CFD4DA7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.98.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"48D007FD-C1AD-477E-9AA5-DDB4522D3248\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.98.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D6ADB9F6-B519-45D0-966F-F095372FBB49\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.98.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E914BAF-2E3A-415E-BAA7-FA02B4A22E25\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.99.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"55FCB7EC-8060-434B-B485-0DC7DBFE117D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.99.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9524E069-2A80-4068-9945-2752EF2126EB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.99.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9E1B30CC-478C-4BD1-AF4C-D126B8CCE8D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.99.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D713119-F9C6-4656-92C9-A5B863A4B72F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.99.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A5E99C8-3778-416B-915F-7335C72435B2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.99.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"578DCE6D-3360-43DA-B22E-E0005A6AF388\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.99.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E4D7B93B-0CF5-4CAF-B1F4-8A816A427BC7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.99.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5FDAF214-1851-4DFC-ACAA-37D8CD83D323\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.99.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B41BBCA6-237B-4CB6-9208-571D47251E18\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.99.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FD6CAB29-56F9-4C54-97D8-CBB338658EB0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.99.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C69C603A-34A1-4EF9-A332-6984928BF72C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.99.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E8814493-75B4-45DD-886B-054A1C27F870\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.99.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E98DCCDE-2800-4FC5-BE49-3EC7583F9768\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.99.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF2C126C-075D-42F0-B9DD-95267D14C818\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.99.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"62379505-A869-48AA-8A32-768583F12266\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.99.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"737C92B8-185F-4049-A7F4-D9D4DA6DDFDC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga:0.99.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1FF1EAD6-1BAF-4D5E-BEB1-BC433041482D\"}]}]}],\"references\":[{\"url\":\"http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=61ab0301606053192f45c188bc48afc837518770\",\"source\":\"cret@cert.org\"},{\"url\":\"http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=717750433839762d23a5f8d88fe0b4d57c8d490a\",\"source\":\"cret@cert.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00027.html\",\"source\":\"cret@cert.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00007.html\",\"source\":\"cret@cert.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00010.html\",\"source\":\"cret@cert.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html\",\"source\":\"cret@cert.org\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1258.html\",\"source\":\"cret@cert.org\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1259.html\",\"source\":\"cret@cert.org\"},{\"url\":\"http://secunia.com/advisories/46139\",\"source\":\"cret@cert.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/46274\",\"source\":\"cret@cert.org\"},{\"url\":\"http://secunia.com/advisories/48106\",\"source\":\"cret@cert.org\"},{\"url\":\"http://security.gentoo.org/glsa/glsa-201202-02.xml\",\"source\":\"cret@cert.org\"},{\"url\":\"http://www.debian.org/security/2011/dsa-2316\",\"source\":\"cret@cert.org\"},{\"url\":\"http://www.kb.cert.org/vuls/id/668534\",\"source\":\"cret@cert.org\",\"tags\":[\"US Government Resource\"]},{\"url\":\"http://www.quagga.net/download/quagga-0.99.19.changelog.txt\",\"source\":\"cret@cert.org\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=738396\",\"source\":\"cret@cert.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://www.cert.fi/en/reports/2011/vulnerability539178.html\",\"source\":\"cret@cert.org\"},{\"url\":\"http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=61ab0301606053192f45c188bc48afc837518770\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=717750433839762d23a5f8d88fe0b4d57c8d490a\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00027.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00007.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00010.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1258.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1259.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/46139\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/46274\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/48106\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://security.gentoo.org/glsa/glsa-201202-02.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2011/dsa-2316\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.kb.cert.org/vuls/id/668534\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"US Government Resource\"]},{\"url\":\"http://www.quagga.net/download/quagga-0.99.19.changelog.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=738396\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://www.cert.fi/en/reports/2011/vulnerability539178.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}", }, }
fkie_cve-2011-3325
Vulnerability from fkie_nvd
Vendor | Product | Version | |
---|---|---|---|
quagga | quagga | * | |
quagga | quagga | 0.95 | |
quagga | quagga | 0.96 | |
quagga | quagga | 0.96.1 | |
quagga | quagga | 0.96.2 | |
quagga | quagga | 0.96.3 | |
quagga | quagga | 0.96.4 | |
quagga | quagga | 0.96.5 | |
quagga | quagga | 0.97.0 | |
quagga | quagga | 0.97.1 | |
quagga | quagga | 0.97.2 | |
quagga | quagga | 0.97.3 | |
quagga | quagga | 0.97.4 | |
quagga | quagga | 0.97.5 | |
quagga | quagga | 0.98.0 | |
quagga | quagga | 0.98.1 | |
quagga | quagga | 0.98.2 | |
quagga | quagga | 0.98.3 | |
quagga | quagga | 0.98.4 | |
quagga | quagga | 0.98.5 | |
quagga | quagga | 0.98.6 | |
quagga | quagga | 0.99.1 | |
quagga | quagga | 0.99.2 | |
quagga | quagga | 0.99.3 | |
quagga | quagga | 0.99.4 | |
quagga | quagga | 0.99.5 | |
quagga | quagga | 0.99.6 | |
quagga | quagga | 0.99.7 | |
quagga | quagga | 0.99.8 | |
quagga | quagga | 0.99.9 | |
quagga | quagga | 0.99.10 | |
quagga | quagga | 0.99.11 | |
quagga | quagga | 0.99.12 | |
quagga | quagga | 0.99.13 | |
quagga | quagga | 0.99.14 | |
quagga | quagga | 0.99.15 | |
quagga | quagga | 0.99.16 | |
quagga | quagga | 0.99.17 |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:quagga:quagga:*:*:*:*:*:*:*:*", matchCriteriaId: "CDFDF175-4863-4A33-88CA-3539A3D2B936", versionEndIncluding: "0.99.18", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.95:*:*:*:*:*:*:*", matchCriteriaId: "CD7A8AD5-A315-4242-960C-05E792B30547", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.96:*:*:*:*:*:*:*", matchCriteriaId: "6B83BCE2-24D0-4B5B-A034-62BFF1894AE2", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.96.1:*:*:*:*:*:*:*", matchCriteriaId: "FDD63DD9-1809-4CEC-AB69-955A7B127CA8", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.96.2:*:*:*:*:*:*:*", matchCriteriaId: "0A2AD1AD-DDE2-477B-8EFD-767B6FD8EDBB", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.96.3:*:*:*:*:*:*:*", matchCriteriaId: "99BD881B-9B53-4E12-B083-87C9C87CDF62", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.96.4:*:*:*:*:*:*:*", matchCriteriaId: "F910313F-FFE1-470A-A9B6-8A854C73DC97", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.96.5:*:*:*:*:*:*:*", matchCriteriaId: "9B0A9232-968D-4D3E-82A0-F5CC858EAF48", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.97.0:*:*:*:*:*:*:*", matchCriteriaId: "CD5F4CFB-BE1F-4424-8D2F-B921704E3AA0", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.97.1:*:*:*:*:*:*:*", matchCriteriaId: "3A55FF13-8E56-4A27-B7FD-A855735E1045", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.97.2:*:*:*:*:*:*:*", matchCriteriaId: "F7DDBC3B-99BB-4404-9A73-90ED6581D69A", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.97.3:*:*:*:*:*:*:*", matchCriteriaId: "AB09A713-E91E-44E7-8B82-F70F655A97B1", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.97.4:*:*:*:*:*:*:*", matchCriteriaId: "10173750-690B-4576-AB3F-11A0861AA78B", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.97.5:*:*:*:*:*:*:*", matchCriteriaId: "0EF8693A-D561-4D2E-BD60-5630601C6A94", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.98.0:*:*:*:*:*:*:*", matchCriteriaId: "BE43983A-73CB-41A5-889B-1AEA9A27F440", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.98.1:*:*:*:*:*:*:*", matchCriteriaId: "6EB589E9-85C0-4E87-856B-A2832383B129", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.98.2:*:*:*:*:*:*:*", matchCriteriaId: "7CF5EB8A-8E46-4490-BA88-03D4BED3EB84", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.98.3:*:*:*:*:*:*:*", matchCriteriaId: "C6445BEF-245C-47CE-9779-96C97CFD4DA7", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.98.4:*:*:*:*:*:*:*", matchCriteriaId: "48D007FD-C1AD-477E-9AA5-DDB4522D3248", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.98.5:*:*:*:*:*:*:*", matchCriteriaId: "D6ADB9F6-B519-45D0-966F-F095372FBB49", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.98.6:*:*:*:*:*:*:*", matchCriteriaId: "6E914BAF-2E3A-415E-BAA7-FA02B4A22E25", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.99.1:*:*:*:*:*:*:*", matchCriteriaId: "55FCB7EC-8060-434B-B485-0DC7DBFE117D", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.99.2:*:*:*:*:*:*:*", matchCriteriaId: "9524E069-2A80-4068-9945-2752EF2126EB", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.99.3:*:*:*:*:*:*:*", matchCriteriaId: "9E1B30CC-478C-4BD1-AF4C-D126B8CCE8D6", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.99.4:*:*:*:*:*:*:*", matchCriteriaId: "1D713119-F9C6-4656-92C9-A5B863A4B72F", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.99.5:*:*:*:*:*:*:*", matchCriteriaId: "1A5E99C8-3778-416B-915F-7335C72435B2", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.99.6:*:*:*:*:*:*:*", matchCriteriaId: "578DCE6D-3360-43DA-B22E-E0005A6AF388", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.99.7:*:*:*:*:*:*:*", matchCriteriaId: "E4D7B93B-0CF5-4CAF-B1F4-8A816A427BC7", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.99.8:*:*:*:*:*:*:*", matchCriteriaId: "5FDAF214-1851-4DFC-ACAA-37D8CD83D323", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.99.9:*:*:*:*:*:*:*", matchCriteriaId: "B41BBCA6-237B-4CB6-9208-571D47251E18", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.99.10:*:*:*:*:*:*:*", matchCriteriaId: "FD6CAB29-56F9-4C54-97D8-CBB338658EB0", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.99.11:*:*:*:*:*:*:*", matchCriteriaId: "C69C603A-34A1-4EF9-A332-6984928BF72C", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.99.12:*:*:*:*:*:*:*", matchCriteriaId: "E8814493-75B4-45DD-886B-054A1C27F870", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.99.13:*:*:*:*:*:*:*", matchCriteriaId: "E98DCCDE-2800-4FC5-BE49-3EC7583F9768", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.99.14:*:*:*:*:*:*:*", matchCriteriaId: "EF2C126C-075D-42F0-B9DD-95267D14C818", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.99.15:*:*:*:*:*:*:*", matchCriteriaId: "62379505-A869-48AA-8A32-768583F12266", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.99.16:*:*:*:*:*:*:*", matchCriteriaId: "737C92B8-185F-4049-A7F4-D9D4DA6DDFDC", vulnerable: true, }, { criteria: "cpe:2.3:a:quagga:quagga:0.99.17:*:*:*:*:*:*:*", matchCriteriaId: "1FF1EAD6-1BAF-4D5E-BEB1-BC433041482D", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet.", }, { lang: "es", value: "ospf_packet.c en ospfd en Quagga anterior a v0.99.19 permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través (1) un tipo de campo 0x0a en una cabecera del paquete en IPv4 o (2) un paquete Hello IPv4 truncado.", }, ], id: "CVE-2011-3325", lastModified: "2024-11-21T01:30:16.137", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "MEDIUM", cvssData: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P", version: "2.0", }, exploitabilityScore: 10, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], }, published: "2011-10-10T10:55:06.503", references: [ { source: "cret@cert.org", url: "http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=61ab0301606053192f45c188bc48afc837518770", }, { source: "cret@cert.org", url: "http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=717750433839762d23a5f8d88fe0b4d57c8d490a", }, { source: "cret@cert.org", url: "http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00027.html", }, { source: "cret@cert.org", url: "http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00007.html", }, { source: "cret@cert.org", url: "http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00010.html", }, { source: "cret@cert.org", url: "http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html", }, { source: "cret@cert.org", url: "http://rhn.redhat.com/errata/RHSA-2012-1258.html", }, { source: "cret@cert.org", url: "http://rhn.redhat.com/errata/RHSA-2012-1259.html", }, { source: "cret@cert.org", tags: [ "Vendor Advisory", ], url: "http://secunia.com/advisories/46139", }, { source: "cret@cert.org", url: "http://secunia.com/advisories/46274", }, { source: "cret@cert.org", url: "http://secunia.com/advisories/48106", }, { source: "cret@cert.org", url: "http://security.gentoo.org/glsa/glsa-201202-02.xml", }, { source: "cret@cert.org", url: "http://www.debian.org/security/2011/dsa-2316", }, { source: "cret@cert.org", tags: [ "US Government Resource", ], url: "http://www.kb.cert.org/vuls/id/668534", }, { source: "cret@cert.org", url: "http://www.quagga.net/download/quagga-0.99.19.changelog.txt", }, { source: "cret@cert.org", tags: [ "Patch", ], url: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", }, { source: "cret@cert.org", url: "https://www.cert.fi/en/reports/2011/vulnerability539178.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=61ab0301606053192f45c188bc48afc837518770", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=717750433839762d23a5f8d88fe0b4d57c8d490a", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00027.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00007.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00010.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://rhn.redhat.com/errata/RHSA-2012-1258.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://rhn.redhat.com/errata/RHSA-2012-1259.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "http://secunia.com/advisories/46139", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://secunia.com/advisories/46274", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://secunia.com/advisories/48106", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://security.gentoo.org/glsa/glsa-201202-02.xml", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.debian.org/security/2011/dsa-2316", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "US Government Resource", ], url: "http://www.kb.cert.org/vuls/id/668534", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.quagga.net/download/quagga-0.99.19.changelog.txt", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Patch", ], url: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://www.cert.fi/en/reports/2011/vulnerability539178.html", }, ], sourceIdentifier: "cret@cert.org", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-399", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
var-201110-0442
Vulnerability from variot
ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet. Quagga contains five remote component vulnerabilities due to issues when handling BGP, OSPF, and OSPFv3 packets. A buffer overflow vulnerability 2. Please review the CVE identifiers referenced below for details.
Workaround
There is no known workaround at this time.
Resolution
All Quagga users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/quagga-0.99.20 "
References
[ 1 ] CVE-2010-1674 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-1674 [ 2 ] CVE-2010-1675 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-1675 [ 3 ] CVE-2010-2948 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-2948 [ 4 ] CVE-2010-2949 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-2949 [ 5 ] CVE-2011-3323 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3323 [ 6 ] CVE-2011-3324 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3324 [ 7 ] CVE-2011-3325 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3325 [ 8 ] CVE-2011-3326 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3326 [ 9 ] CVE-2011-3327 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3327
Availability
This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-201202-02.xml
Concerns?
Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.
License
Copyright 2012 Gentoo Foundation, Inc; referenced text belongs to its owner(s).
The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5 . ========================================================================== Ubuntu Security Notice USN-1261-1 November 14, 2011
quagga vulnerabilities
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 11.10
- Ubuntu 11.04
- Ubuntu 10.10
- Ubuntu 10.04 LTS
Summary:
Quagga could be made to crash or run programs if it received specially crafted network traffic. (CVE-2011-3323)
Riku Hietamäki, Tuomo Untinen and Jukka Taimisto discovered that Quagga incorrectly handled certain IPv6 Database Description messages. (CVE-2011-3324)
Riku Hietamäki, Tuomo Untinen and Jukka Taimisto discovered that Quagga incorrectly handled certain IPv4 packets. (CVE-2011-3325)
Riku Hietamäki, Tuomo Untinen and Jukka Taimisto discovered that Quagga incorrectly handled invalid Link State Advertisement (LSA) types. (CVE-2011-3327)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 11.10: quagga 0.99.18-2ubuntu0.1
Ubuntu 11.04: quagga 0.99.17-4ubuntu1.1
Ubuntu 10.10: quagga 0.99.17-1ubuntu0.2
Ubuntu 10.04 LTS: quagga 0.99.15-1ubuntu0.3
In general, a standard system update will make all the necessary changes. ----------------------------------------------------------------------
Ovum says ad hoc tools are out-dated. The best practice approach? Fast vulnerability intelligence, threat handling, and setup in one tool.
Read the new report on the Secunia VIM: http://secunia.com/products/corporate/vim/ovum_2011_request/
TITLE: Radfa Sabadkharid Arbitrary File Upload Vulnerability
SECUNIA ADVISORY ID: SA46244
VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/46244/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=46244
RELEASE DATE: 2011-10-24
DISCUSS ADVISORY: http://secunia.com/advisories/46244/#comments
AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s)
http://secunia.com/advisories/46244/
ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS
https://ca.secunia.com/?page=viewadvisory&vuln_id=46244
ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING
http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
DESCRIPTION: A vulnerability has been reported in Radfa Sabadkharid, which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to the wysiwyg/editor/filemanager/upload/php/upload.php script not properly validating uploaded file types, which can be exploited to e.g. execute arbitrary PHP code through an uploaded PHP file.
SOLUTION: Reportedly, the vendor has issued a fix.
PROVIDED AND/OR DISCOVERED BY: St493r
ORIGINAL ADVISORY: http://www.sabadkharid.com/news/19/%D9%82%D8%A7%D8%A8%D9%84-%D8%AA%D9%88%D8%AC%D9%87-%D9%85%D8%B4%D8%AA%D8%B1%DB%8C%D8%A7%D9%86-%D9%82%D8%AF%DB%8C%D9%85%DB%8C-%D9%86%D8%B3%D8%AE%D9%87-%D8%AD%D8%B1%D9%81%D9%87-%D8%A7%DB%8C!.html
OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/advisories/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
===================================================================== Red Hat Security Advisory
Synopsis: Moderate: quagga security update Advisory ID: RHSA-2012:1259-01 Product: Red Hat Enterprise Linux Advisory URL: https://rhn.redhat.com/errata/RHSA-2012-1259.html Issue date: 2012-09-12 CVE Names: CVE-2011-3323 CVE-2011-3324 CVE-2011-3325 CVE-2011-3326 CVE-2011-3327 CVE-2012-0249 CVE-2012-0250 CVE-2012-0255 CVE-2012-1820 =====================================================================
- Summary:
Updated quagga packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6.
The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
- Relevant releases/architectures:
Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64
- Description:
Quagga is a TCP/IP based routing software suite. The Quagga bgpd daemon implements the BGP (Border Gateway Protocol) routing protocol. The Quagga ospfd and ospf6d daemons implement the OSPF (Open Shortest Path First) routing protocol.
A heap-based buffer overflow flaw was found in the way the bgpd daemon processed malformed Extended Communities path attributes. An attacker could send a specially-crafted BGP message, causing bgpd on a target system to crash or, possibly, execute arbitrary code with the privileges of the user running bgpd. The UPDATE message would have to arrive from an explicitly configured BGP peer, but could have originated elsewhere in the BGP network. (CVE-2011-3327)
A stack-based buffer overflow flaw was found in the way the ospf6d daemon processed malformed Link State Update packets. An OSPF router could use this flaw to crash ospf6d on an adjacent router. (CVE-2011-3323)
A flaw was found in the way the ospf6d daemon processed malformed link state advertisements. An OSPF neighbor could use this flaw to crash ospf6d on a target system. (CVE-2011-3324)
A flaw was found in the way the ospfd daemon processed malformed Hello packets. An OSPF neighbor could use this flaw to crash ospfd on a target system. (CVE-2011-3325)
A flaw was found in the way the ospfd daemon processed malformed link state advertisements. An OSPF router in the autonomous system could use this flaw to crash ospfd on a target system. (CVE-2011-3326)
An assertion failure was found in the way the ospfd daemon processed certain Link State Update packets. An OSPF router could use this flaw to cause ospfd on an adjacent router to abort. (CVE-2012-0249)
A buffer overflow flaw was found in the way the ospfd daemon processed certain Link State Update packets. An OSPF router could use this flaw to crash ospfd on an adjacent router. (CVE-2012-0250)
Two flaws were found in the way the bgpd daemon processed certain BGP OPEN messages. A configured BGP peer could cause bgpd on a target system to abort via a specially-crafted BGP OPEN message. (CVE-2012-0255, CVE-2012-1820)
Red Hat would like to thank CERT-FI for reporting CVE-2011-3327, CVE-2011-3323, CVE-2011-3324, CVE-2011-3325, and CVE-2011-3326; and the CERT/CC for reporting CVE-2012-0249, CVE-2012-0250, CVE-2012-0255, and CVE-2012-1820. CERT-FI acknowledges Riku Hietamäki, Tuomo Untinen and Jukka Taimisto of the Codenomicon CROSS project as the original reporters of CVE-2011-3327, CVE-2011-3323, CVE-2011-3324, CVE-2011-3325, and CVE-2011-3326. The CERT/CC acknowledges Martin Winter at OpenSourceRouting.org as the original reporter of CVE-2012-0249, CVE-2012-0250, and CVE-2012-0255, and Denis Ovsienko as the original reporter of CVE-2012-1820.
Users of quagga should upgrade to these updated packages, which contain backported patches to correct these issues. After installing the updated packages, the bgpd, ospfd, and ospf6d daemons will be restarted automatically.
- Solution:
Before applying this update, make sure all previously-released errata relevant to your system have been applied.
This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
- Bugs fixed (http://bugzilla.redhat.com/):
738393 - CVE-2011-3323 Quagga (ospf6d): Stack-based buffer overflow while decoding Link State Update packet with malformed Inter Area Prefix LSA 738394 - CVE-2011-3324 Quagga (ospf6d): Denial of service by decoding malformed Database Description packet headers 738396 - CVE-2011-3325 Quagga (ospfd): Denial of service by decoding too short Hello packet or Hello packet with invalid OSPFv2 header type 738398 - CVE-2011-3326 Quagga (ospfd): Denial of service by decoding Link State Update LSAs of unknown type 738400 - CVE-2011-3327 Quagga (bgpd): Heap-based buffer overflow by decoding BGP UPDATE message with unknown AS_PATH attributes 802781 - CVE-2012-0255 quagga (bgpd): Assertion failure by processing malformed AS4 capability in BGP OPEN message 802827 - CVE-2012-0249 quagga (ospfd): Assertion failure due improper length check for a received LS-Update OSPF packet 802829 - CVE-2012-0250 quagga (ospfd): Crash by processing LS-Update OSPF packet due improper length check of the Network-LSA structures 817580 - CVE-2012-1820 quagga (bgpd): Assertion failure by processing BGP OPEN message with malformed ORF capability TLV (VU#962587)
- Package List:
Red Hat Enterprise Linux Server (v. 6):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/quagga-0.99.15-7.el6_3.2.src.rpm
i386: quagga-0.99.15-7.el6_3.2.i686.rpm quagga-debuginfo-0.99.15-7.el6_3.2.i686.rpm
ppc64: quagga-0.99.15-7.el6_3.2.ppc64.rpm quagga-debuginfo-0.99.15-7.el6_3.2.ppc64.rpm
s390x: quagga-0.99.15-7.el6_3.2.s390x.rpm quagga-debuginfo-0.99.15-7.el6_3.2.s390x.rpm
x86_64: quagga-0.99.15-7.el6_3.2.x86_64.rpm quagga-debuginfo-0.99.15-7.el6_3.2.x86_64.rpm
Red Hat Enterprise Linux Server Optional (v. 6):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/quagga-0.99.15-7.el6_3.2.src.rpm
i386: quagga-contrib-0.99.15-7.el6_3.2.i686.rpm quagga-debuginfo-0.99.15-7.el6_3.2.i686.rpm quagga-devel-0.99.15-7.el6_3.2.i686.rpm
ppc64: quagga-contrib-0.99.15-7.el6_3.2.ppc64.rpm quagga-debuginfo-0.99.15-7.el6_3.2.ppc.rpm quagga-debuginfo-0.99.15-7.el6_3.2.ppc64.rpm quagga-devel-0.99.15-7.el6_3.2.ppc.rpm quagga-devel-0.99.15-7.el6_3.2.ppc64.rpm
s390x: quagga-contrib-0.99.15-7.el6_3.2.s390x.rpm quagga-debuginfo-0.99.15-7.el6_3.2.s390.rpm quagga-debuginfo-0.99.15-7.el6_3.2.s390x.rpm quagga-devel-0.99.15-7.el6_3.2.s390.rpm quagga-devel-0.99.15-7.el6_3.2.s390x.rpm
x86_64: quagga-contrib-0.99.15-7.el6_3.2.x86_64.rpm quagga-debuginfo-0.99.15-7.el6_3.2.i686.rpm quagga-debuginfo-0.99.15-7.el6_3.2.x86_64.rpm quagga-devel-0.99.15-7.el6_3.2.i686.rpm quagga-devel-0.99.15-7.el6_3.2.x86_64.rpm
Red Hat Enterprise Linux Workstation (v. 6):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Workstation/en/os/SRPMS/quagga-0.99.15-7.el6_3.2.src.rpm
i386: quagga-0.99.15-7.el6_3.2.i686.rpm quagga-debuginfo-0.99.15-7.el6_3.2.i686.rpm
x86_64: quagga-0.99.15-7.el6_3.2.x86_64.rpm quagga-debuginfo-0.99.15-7.el6_3.2.x86_64.rpm
Red Hat Enterprise Linux Workstation Optional (v. 6):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Workstation/en/os/SRPMS/quagga-0.99.15-7.el6_3.2.src.rpm
i386: quagga-contrib-0.99.15-7.el6_3.2.i686.rpm quagga-debuginfo-0.99.15-7.el6_3.2.i686.rpm quagga-devel-0.99.15-7.el6_3.2.i686.rpm
x86_64: quagga-contrib-0.99.15-7.el6_3.2.x86_64.rpm quagga-debuginfo-0.99.15-7.el6_3.2.i686.rpm quagga-debuginfo-0.99.15-7.el6_3.2.x86_64.rpm quagga-devel-0.99.15-7.el6_3.2.i686.rpm quagga-devel-0.99.15-7.el6_3.2.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package
- References:
https://www.redhat.com/security/data/cve/CVE-2011-3323.html https://www.redhat.com/security/data/cve/CVE-2011-3324.html https://www.redhat.com/security/data/cve/CVE-2011-3325.html https://www.redhat.com/security/data/cve/CVE-2011-3326.html https://www.redhat.com/security/data/cve/CVE-2011-3327.html https://www.redhat.com/security/data/cve/CVE-2012-0249.html https://www.redhat.com/security/data/cve/CVE-2012-0250.html https://www.redhat.com/security/data/cve/CVE-2012-0255.html https://www.redhat.com/security/data/cve/CVE-2012-1820.html https://access.redhat.com/security/updates/classification/#moderate
- Contact:
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/
Copyright 2012 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux)
iD8DBQFQUOxMXlSAg2UNWIIRAspnAKDCd5umtQIWFZYD8vyRPpCkAlgiwwCglw+g P4VSjxs4xRnVCtT/IOkBkKQ= =VtuC -----END PGP SIGNATURE-----
-- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", affected_products: { "@id": "https://www.variotdbs.pl/ref/affected_products", }, configurations: { "@id": "https://www.variotdbs.pl/ref/configurations", }, credits: { "@id": "https://www.variotdbs.pl/ref/credits", }, cvss: { "@id": "https://www.variotdbs.pl/ref/cvss/", }, description: { "@id": "https://www.variotdbs.pl/ref/description/", }, exploit_availability: { "@id": "https://www.variotdbs.pl/ref/exploit_availability/", }, external_ids: { "@id": "https://www.variotdbs.pl/ref/external_ids/", }, iot: { "@id": "https://www.variotdbs.pl/ref/iot/", }, iot_taxonomy: { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/", }, patch: { "@id": "https://www.variotdbs.pl/ref/patch/", }, problemtype_data: { "@id": "https://www.variotdbs.pl/ref/problemtype_data/", }, references: { "@id": "https://www.variotdbs.pl/ref/references/", }, sources: { "@id": "https://www.variotdbs.pl/ref/sources/", }, sources_release_date: { "@id": "https://www.variotdbs.pl/ref/sources_release_date/", }, sources_update_date: { "@id": "https://www.variotdbs.pl/ref/sources_update_date/", }, threat_type: { "@id": "https://www.variotdbs.pl/ref/threat_type/", }, title: { "@id": "https://www.variotdbs.pl/ref/title/", }, type: { "@id": "https://www.variotdbs.pl/ref/type/", }, }, "@id": "https://www.variotdbs.pl/vuln/VAR-201110-0442", affected_products: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { model: "quagga", scope: "eq", trust: 1.6, vendor: "quagga", version: "0.99.15", }, { model: "quagga", scope: "eq", trust: 1.6, vendor: "quagga", version: "0.99.11", }, { model: "quagga", scope: "eq", trust: 1.6, vendor: "quagga", version: "0.99.16", }, { model: "quagga", scope: "eq", trust: 1.6, vendor: "quagga", version: "0.99.13", }, { model: "quagga", scope: "eq", trust: 1.6, vendor: "quagga", version: "0.99.14", }, { model: "quagga", scope: "eq", trust: 1.6, vendor: "quagga", version: "0.99.9", }, { model: "quagga", scope: "eq", trust: 1.6, vendor: "quagga", version: "0.99.10", }, { model: "quagga", scope: "eq", trust: 1.6, vendor: "quagga", version: "0.99.17", }, { model: "quagga", scope: "eq", trust: 1.6, vendor: "quagga", version: "0.99.12", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.99.8", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.97.0", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.99.1", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.98.4", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.96.3", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.96.4", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.99.2", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.97.5", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.98.3", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.99.5", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.96.5", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.97.2", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.96.1", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.95", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.98.5", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.96", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.97.3", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.97.4", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.96.2", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.98.1", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.99.3", }, { model: "quagga", scope: "lte", trust: 1, vendor: "quagga", version: "0.99.18", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.99.7", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.98.6", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.98.2", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.97.1", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.99.4", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.99.6", }, { model: "quagga", scope: "eq", trust: 1, vendor: "quagga", version: "0.98.0", }, { model: null, scope: null, trust: 0.8, vendor: "debian gnu linux", version: null, }, { model: null, scope: null, trust: 0.8, vendor: "red hat", version: null, }, { model: "quagga", scope: "lt", trust: 0.8, vendor: "quagga", version: "0.99.19", }, { model: "seil/b1", scope: "lt", trust: 0.8, vendor: "internet initiative", version: "1.00 from 3.41", }, { model: "seil/neu 2fe plus", scope: "lt", trust: 0.8, vendor: "internet initiative", version: "1.00 from 2.13", }, { model: "seil/turbo", scope: "lt", trust: 0.8, vendor: "internet initiative", version: "1.00 from 2.13", }, { model: "seil/x1", scope: "lt", trust: 0.8, vendor: "internet initiative", version: "1.00 from 3.41", }, { model: "seil/x2", scope: "lt", trust: 0.8, vendor: "internet initiative", version: "1.00 from 3.41", }, { model: "seil/x86", scope: "lt", trust: 0.8, vendor: "internet initiative", version: "1.70 from 1.91", }, { model: "quagga", scope: "eq", trust: 0.6, vendor: "quagga", version: "0.99.18", }, { model: "linux i386", scope: "eq", trust: 0.3, vendor: "ubuntu", version: "11.10", }, { model: "linux amd64", scope: "eq", trust: 0.3, vendor: "ubuntu", version: "11.10", }, { model: "linux powerpc", scope: "eq", trust: 0.3, vendor: "ubuntu", version: "11.04", }, { model: "linux i386", scope: "eq", trust: 0.3, vendor: "ubuntu", version: "11.04", }, { model: "linux arm", scope: "eq", trust: 0.3, vendor: "ubuntu", version: "11.04", }, { model: "linux amd64", scope: "eq", trust: 0.3, vendor: "ubuntu", version: "11.04", }, { model: "linux powerpc", scope: "eq", trust: 0.3, vendor: "ubuntu", version: "10.10", }, { model: "linux i386", scope: "eq", trust: 0.3, vendor: "ubuntu", version: "10.10", }, { model: "linux arm", scope: "eq", trust: 0.3, vendor: "ubuntu", version: "10.10", }, { model: "linux amd64", scope: "eq", trust: 0.3, vendor: "ubuntu", version: "10.10", }, { model: "linux sparc", scope: "eq", trust: 0.3, vendor: "ubuntu", version: "10.04", }, { model: "linux powerpc", scope: "eq", trust: 0.3, vendor: "ubuntu", version: "10.04", }, { model: "linux i386", scope: "eq", trust: 0.3, vendor: "ubuntu", version: "10.04", }, { model: "linux arm", scope: "eq", trust: 0.3, vendor: "ubuntu", version: "10.04", }, { model: "linux amd64", scope: "eq", trust: 0.3, vendor: "ubuntu", version: "10.04", }, { model: "linux enterprise server for vmware sp1", scope: "eq", trust: 0.3, vendor: "suse", version: "11", }, { model: "linux enterprise server sp1", scope: "eq", trust: 0.3, vendor: "suse", version: "11", }, { model: "linux enterprise server sp4", scope: "eq", trust: 0.3, vendor: "suse", version: "10", }, { model: "linux enterprise server sp3", scope: "eq", trust: 0.3, vendor: "suse", version: "10", }, { model: "linux enterprise server sp2", scope: "eq", trust: 0.3, vendor: "suse", version: "10", }, { model: "linux enterprise sdk sp1", scope: "eq", trust: 0.3, vendor: "suse", version: "11", }, { model: "linux enterprise sdk sp4", scope: "eq", trust: 0.3, vendor: "suse", version: "10", }, { model: "linux enterprise sdk sp3", scope: "eq", trust: 0.3, vendor: "suse", version: "10", }, { model: "opensuse", scope: "eq", trust: 0.3, vendor: "suse", version: "11.4", }, { model: "opensuse", scope: "eq", trust: 0.3, vendor: "suse", version: "11.3", }, { model: "enterprise linux desktop workstation client", scope: "eq", trust: 0.3, vendor: "redhat", version: "5", }, { model: "hat enterprise linux workstation", scope: "eq", trust: 0.3, vendor: "red", version: "6", }, { model: "hat enterprise linux server", scope: "eq", trust: 0.3, vendor: "red", version: "6", }, { model: "hat enterprise linux desktop client", scope: "eq", trust: 0.3, vendor: "red", version: "5", }, { model: "hat enterprise linux server", scope: "eq", trust: 0.3, vendor: "red", version: "5", }, { model: "routing software suite", scope: "eq", trust: 0.3, vendor: "quagga", version: "0.99.17", }, { model: "routing software suite", scope: "eq", trust: 0.3, vendor: "quagga", version: "0.99.16", }, { model: "routing software suite", scope: "eq", trust: 0.3, vendor: "quagga", version: "0.99.15", }, { model: "routing software suite", scope: "eq", trust: 0.3, vendor: "quagga", version: "0.99.11", }, { model: "routing software suite", scope: "eq", trust: 0.3, vendor: "quagga", version: "0.99.9", }, { model: "routing software suite", scope: "eq", trust: 0.3, vendor: "quagga", version: "0.99.8", }, { model: "routing software suite", scope: "eq", trust: 0.3, vendor: "quagga", version: "0.99.7", }, { model: "routing software suite", scope: "eq", trust: 0.3, vendor: "quagga", version: "0.99.6", }, { model: "routing software suite", scope: "eq", trust: 0.3, vendor: "quagga", version: "0.99.5", }, { model: "routing software suite", scope: "eq", trust: 0.3, vendor: "quagga", version: "0.99.4", }, { model: "routing software suite", scope: "eq", trust: 0.3, vendor: "quagga", version: "0.99.3", }, { model: "routing software suite", scope: "eq", trust: 0.3, vendor: "quagga", version: "0.99.2", }, { model: "routing software suite", scope: "eq", trust: 0.3, vendor: "quagga", version: "0.99.1", }, { model: "routing software suite", scope: "eq", trust: 0.3, vendor: "quagga", version: "0.98.6", }, { model: "routing software suite", scope: "eq", trust: 0.3, vendor: "quagga", version: "0.98.5", }, { model: "routing software suite", scope: "eq", trust: 0.3, vendor: "quagga", version: "0.98.3", }, { model: "routing software suite", scope: "eq", trust: 0.3, vendor: "quagga", version: "0.97.3", }, { model: "routing software suite", scope: "eq", trust: 0.3, vendor: "quagga", version: "0.96.4", }, { model: "routing software suite", scope: "eq", trust: 0.3, vendor: "quagga", version: "0.96.3", }, { model: "routing software suite", scope: "eq", trust: 0.3, vendor: "quagga", version: "0.96.2", }, { model: "enterprise linux", scope: "eq", trust: 0.3, vendor: "oracle", version: "6.2", }, { model: "enterprise linux", scope: "eq", trust: 0.3, vendor: "oracle", version: "6", }, { model: "enterprise linux", scope: "eq", trust: 0.3, vendor: "oracle", version: "5", }, { model: "linux sparc", scope: "eq", trust: 0.3, vendor: "debian", version: "6.0", }, { model: "linux s/390", scope: "eq", trust: 0.3, vendor: "debian", version: "6.0", }, { model: "linux powerpc", scope: "eq", trust: 0.3, vendor: "debian", version: "6.0", }, { model: "linux mips", scope: "eq", trust: 0.3, vendor: "debian", version: "6.0", }, { model: "linux ia-64", scope: "eq", trust: 0.3, vendor: "debian", version: "6.0", }, { model: "linux ia-32", scope: "eq", trust: 0.3, vendor: "debian", version: "6.0", }, { model: "linux arm", scope: "eq", trust: 0.3, vendor: "debian", version: "6.0", }, { model: "linux amd64", scope: "eq", trust: 0.3, vendor: "debian", version: "6.0", }, { model: "routing software suite", scope: "ne", trust: 0.3, vendor: "quagga", version: "0.99.19", }, ], sources: [ { db: "CERT/CC", id: "VU#668534", }, { db: "BID", id: "49784", }, { db: "JVNDB", id: "JVNDB-2011-002370", }, { db: "CNNVD", id: "CNNVD-201109-585", }, { db: "NVD", id: "CVE-2011-3325", }, ], }, configurations: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", children: { "@container": "@list", }, cpe_match: { "@container": "@list", }, data: { "@container": "@list", }, nodes: { "@container": "@list", }, }, data: [ { CVE_data_version: "4.0", nodes: [ { cpe_match: [ { cpe22Uri: "cpe:/a:quagga:quagga", vulnerable: true, }, { cpe22Uri: "cpe:/o:iij:seil%252fb1_firmware", vulnerable: true, }, { cpe22Uri: "cpe:/o:iij:seil%252fneu_2fe_plus_firmware", vulnerable: true, }, { cpe22Uri: "cpe:/o:iij:seil%252fturbo_firmware", vulnerable: true, }, { cpe22Uri: "cpe:/o:iij:seil%252fx1_firmware", vulnerable: true, }, { cpe22Uri: "cpe:/o:iij:seil%252fx2_firmware", vulnerable: true, }, { cpe22Uri: "cpe:/o:iij:seil%252fx86_firmware", vulnerable: true, }, ], operator: "OR", }, ], }, ], sources: [ { db: "JVNDB", id: "JVNDB-2011-002370", }, ], }, credits: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "Riku Hietam&amp;amp;amp;amp;amp;amp;amp;amp;amp;amp;amp;amp;amp;amp;amp;amp;auml;ki, Tuomo Untinen and Jukka Taimisto of the Codenomicon CROSS project", sources: [ { db: "BID", id: "49784", }, ], trust: 0.3, }, cve: "CVE-2011-3325", cvss: { "@context": { cvssV2: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", }, cvssV3: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", }, severity: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#", }, "@id": "https://www.variotdbs.pl/ref/cvss/severity", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { cvssV2: [ { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", author: "nvd@nist.gov", availabilityImpact: "PARTIAL", baseScore: 5, confidentialityImpact: "NONE", exploitabilityScore: 10, id: "CVE-2011-3325", impactScore: 2.9, integrityImpact: "NONE", severity: "MEDIUM", trust: 1.8, vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P", version: "2.0", }, ], cvssV3: [], severity: [ { author: "nvd@nist.gov", id: "CVE-2011-3325", trust: 1, value: "MEDIUM", }, { author: "CARNEGIE MELLON", id: "VU#668534", trust: 0.8, value: "15.69", }, { author: "NVD", id: "CVE-2011-3325", trust: 0.8, value: "Medium", }, { author: "CNNVD", id: "CNNVD-201109-585", trust: 0.6, value: "MEDIUM", }, ], }, ], sources: [ { db: "CERT/CC", id: "VU#668534", }, { db: "JVNDB", id: "JVNDB-2011-002370", }, { db: "CNNVD", id: "CNNVD-201109-585", }, { db: "NVD", id: "CVE-2011-3325", }, ], }, description: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet. Quagga contains five remote component vulnerabilities due to issues when handling BGP, OSPF, and OSPFv3 packets. A buffer overflow vulnerability\n2. Please review\nthe CVE identifiers referenced below for details. \n\nWorkaround\n==========\n\nThere is no known workaround at this time. \n\nResolution\n==========\n\nAll Quagga users should upgrade to the latest version:\n\n # emerge --sync\n # emerge --ask --oneshot --verbose \">=net-misc/quagga-0.99.20 \"\n\nReferences\n==========\n\n[ 1 ] CVE-2010-1674\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-1674\n[ 2 ] CVE-2010-1675\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-1675\n[ 3 ] CVE-2010-2948\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-2948\n[ 4 ] CVE-2010-2949\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-2949\n[ 5 ] CVE-2011-3323\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3323\n[ 6 ] CVE-2011-3324\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3324\n[ 7 ] CVE-2011-3325\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3325\n[ 8 ] CVE-2011-3326\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3326\n[ 9 ] CVE-2011-3327\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3327\n\nAvailability\n============\n\nThis GLSA and any updates to it are available for viewing at\nthe Gentoo Security Website:\n\n http://security.gentoo.org/glsa/glsa-201202-02.xml\n\nConcerns?\n=========\n\nSecurity is a primary focus of Gentoo Linux and ensuring the\nconfidentiality and security of our users' machines is of utmost\nimportance to us. Any security concerns should be addressed to\nsecurity@gentoo.org or alternatively, you may file a bug at\nhttps://bugs.gentoo.org. \n\nLicense\n=======\n\nCopyright 2012 Gentoo Foundation, Inc; referenced text\nbelongs to its owner(s). \n\nThe contents of this document are licensed under the\nCreative Commons - Attribution / Share Alike license. \n\nhttp://creativecommons.org/licenses/by-sa/2.5\n. ==========================================================================\nUbuntu Security Notice USN-1261-1\nNovember 14, 2011\n\nquagga vulnerabilities\n==========================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 11.10\n- Ubuntu 11.04\n- Ubuntu 10.10\n- Ubuntu 10.04 LTS\n\nSummary:\n\nQuagga could be made to crash or run programs if it received specially\ncrafted network traffic. (CVE-2011-3323)\n\nRiku Hietamäki, Tuomo Untinen and Jukka Taimisto discovered that Quagga\nincorrectly handled certain IPv6 Database Description messages. (CVE-2011-3324)\n\nRiku Hietamäki, Tuomo Untinen and Jukka Taimisto discovered that Quagga\nincorrectly handled certain IPv4 packets. \n(CVE-2011-3325)\n\nRiku Hietamäki, Tuomo Untinen and Jukka Taimisto discovered that Quagga\nincorrectly handled invalid Link State Advertisement (LSA) types. (CVE-2011-3327)\n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 11.10:\n quagga 0.99.18-2ubuntu0.1\n\nUbuntu 11.04:\n quagga 0.99.17-4ubuntu1.1\n\nUbuntu 10.10:\n quagga 0.99.17-1ubuntu0.2\n\nUbuntu 10.04 LTS:\n quagga 0.99.15-1ubuntu0.3\n\nIn general, a standard system update will make all the necessary changes. ----------------------------------------------------------------------\n\nOvum says ad hoc tools are out-dated. The best practice approach?\nFast vulnerability intelligence, threat handling, and setup in one tool. \n\nRead the new report on the Secunia VIM:\nhttp://secunia.com/products/corporate/vim/ovum_2011_request/ \n\n----------------------------------------------------------------------\n\nTITLE:\nRadfa Sabadkharid Arbitrary File Upload Vulnerability\n\nSECUNIA ADVISORY ID:\nSA46244\n\nVERIFY ADVISORY:\nSecunia.com\nhttp://secunia.com/advisories/46244/\nCustomer Area (Credentials Required)\nhttps://ca.secunia.com/?page=viewadvisory&vuln_id=46244\n\nRELEASE DATE:\n2011-10-24\n\nDISCUSS ADVISORY:\nhttp://secunia.com/advisories/46244/#comments\n\nAVAILABLE ON SITE AND IN CUSTOMER AREA:\n * Last Update\n * Popularity\n * Comments\n * Criticality Level\n * Impact\n * Where\n * Solution Status\n * Operating System / Software\n * CVE Reference(s)\n\nhttp://secunia.com/advisories/46244/\n\nONLY AVAILABLE IN CUSTOMER AREA:\n * Authentication Level\n * Report Reliability\n * Secunia PoC\n * Secunia Analysis\n * Systems Affected\n * Approve Distribution\n * Remediation Status\n * Secunia CVSS Score\n * CVSS\n\nhttps://ca.secunia.com/?page=viewadvisory&vuln_id=46244\n\nONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI:\n * AUTOMATED SCANNING\n\nhttp://secunia.com/vulnerability_scanning/personal/\nhttp://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/\n\nDESCRIPTION:\nA vulnerability has been reported in Radfa Sabadkharid, which can be\nexploited by malicious people to compromise a vulnerable system. \n\nThe vulnerability is caused due to the\nwysiwyg/editor/filemanager/upload/php/upload.php script not properly\nvalidating uploaded file types, which can be exploited to e.g. \nexecute arbitrary PHP code through an uploaded PHP file. \n\nSOLUTION:\nReportedly, the vendor has issued a fix. \n\nPROVIDED AND/OR DISCOVERED BY:\nSt493r\n\nORIGINAL ADVISORY:\nhttp://www.sabadkharid.com/news/19/%D9%82%D8%A7%D8%A8%D9%84-%D8%AA%D9%88%D8%AC%D9%87-%D9%85%D8%B4%D8%AA%D8%B1%DB%8C%D8%A7%D9%86-%D9%82%D8%AF%DB%8C%D9%85%DB%8C-%D9%86%D8%B3%D8%AE%D9%87-%D8%AD%D8%B1%D9%81%D9%87-%D8%A7%DB%8C!.html\n\nOTHER REFERENCES:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nDEEP LINKS:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED DESCRIPTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED SOLUTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXPLOIT:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\nprivate users keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\n=====================================================================\n Red Hat Security Advisory\n\nSynopsis: Moderate: quagga security update\nAdvisory ID: RHSA-2012:1259-01\nProduct: Red Hat Enterprise Linux\nAdvisory URL: https://rhn.redhat.com/errata/RHSA-2012-1259.html\nIssue date: 2012-09-12\nCVE Names: CVE-2011-3323 CVE-2011-3324 CVE-2011-3325 \n CVE-2011-3326 CVE-2011-3327 CVE-2012-0249 \n CVE-2012-0250 CVE-2012-0255 CVE-2012-1820 \n=====================================================================\n\n1. Summary:\n\nUpdated quagga packages that fix multiple security issues are now available\nfor Red Hat Enterprise Linux 6. \n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section. \n\n2. Relevant releases/architectures:\n\nRed Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64\nRed Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64\nRed Hat Enterprise Linux Workstation (v. 6) - i386, x86_64\nRed Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64\n\n3. Description:\n\nQuagga is a TCP/IP based routing software suite. The Quagga bgpd daemon\nimplements the BGP (Border Gateway Protocol) routing protocol. The Quagga\nospfd and ospf6d daemons implement the OSPF (Open Shortest Path First)\nrouting protocol. \n\nA heap-based buffer overflow flaw was found in the way the bgpd daemon\nprocessed malformed Extended Communities path attributes. An attacker could\nsend a specially-crafted BGP message, causing bgpd on a target system to\ncrash or, possibly, execute arbitrary code with the privileges of the user\nrunning bgpd. The UPDATE message would have to arrive from an explicitly\nconfigured BGP peer, but could have originated elsewhere in the BGP\nnetwork. (CVE-2011-3327)\n\nA stack-based buffer overflow flaw was found in the way the ospf6d daemon\nprocessed malformed Link State Update packets. An OSPF router could use\nthis flaw to crash ospf6d on an adjacent router. (CVE-2011-3323)\n\nA flaw was found in the way the ospf6d daemon processed malformed link\nstate advertisements. An OSPF neighbor could use this flaw to crash\nospf6d on a target system. (CVE-2011-3324)\n\nA flaw was found in the way the ospfd daemon processed malformed Hello\npackets. An OSPF neighbor could use this flaw to crash ospfd on a\ntarget system. (CVE-2011-3325)\n\nA flaw was found in the way the ospfd daemon processed malformed link state\nadvertisements. An OSPF router in the autonomous system could use this flaw\nto crash ospfd on a target system. (CVE-2011-3326)\n\nAn assertion failure was found in the way the ospfd daemon processed\ncertain Link State Update packets. An OSPF router could use this flaw to\ncause ospfd on an adjacent router to abort. (CVE-2012-0249)\n\nA buffer overflow flaw was found in the way the ospfd daemon processed\ncertain Link State Update packets. An OSPF router could use this flaw to\ncrash ospfd on an adjacent router. (CVE-2012-0250)\n\nTwo flaws were found in the way the bgpd daemon processed certain BGP OPEN\nmessages. A configured BGP peer could cause bgpd on a target system to\nabort via a specially-crafted BGP OPEN message. (CVE-2012-0255,\nCVE-2012-1820)\n\nRed Hat would like to thank CERT-FI for reporting CVE-2011-3327,\nCVE-2011-3323, CVE-2011-3324, CVE-2011-3325, and CVE-2011-3326; and the\nCERT/CC for reporting CVE-2012-0249, CVE-2012-0250, CVE-2012-0255, and\nCVE-2012-1820. CERT-FI acknowledges Riku Hietamäki, Tuomo Untinen and Jukka\nTaimisto of the Codenomicon CROSS project as the original reporters of\nCVE-2011-3327, CVE-2011-3323, CVE-2011-3324, CVE-2011-3325, and\nCVE-2011-3326. The CERT/CC acknowledges Martin Winter at\nOpenSourceRouting.org as the original reporter of CVE-2012-0249,\nCVE-2012-0250, and CVE-2012-0255, and Denis Ovsienko as the original\nreporter of CVE-2012-1820. \n\nUsers of quagga should upgrade to these updated packages, which contain\nbackported patches to correct these issues. After installing the updated\npackages, the bgpd, ospfd, and ospf6d daemons will be restarted\nautomatically. \n\n4. Solution:\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied. \n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258\n\n5. Bugs fixed (http://bugzilla.redhat.com/):\n\n738393 - CVE-2011-3323 Quagga (ospf6d): Stack-based buffer overflow while decoding Link State Update packet with malformed Inter Area Prefix LSA\n738394 - CVE-2011-3324 Quagga (ospf6d): Denial of service by decoding malformed Database Description packet headers\n738396 - CVE-2011-3325 Quagga (ospfd): Denial of service by decoding too short Hello packet or Hello packet with invalid OSPFv2 header type\n738398 - CVE-2011-3326 Quagga (ospfd): Denial of service by decoding Link State Update LSAs of unknown type\n738400 - CVE-2011-3327 Quagga (bgpd): Heap-based buffer overflow by decoding BGP UPDATE message with unknown AS_PATH attributes\n802781 - CVE-2012-0255 quagga (bgpd): Assertion failure by processing malformed AS4 capability in BGP OPEN message\n802827 - CVE-2012-0249 quagga (ospfd): Assertion failure due improper length check for a received LS-Update OSPF packet\n802829 - CVE-2012-0250 quagga (ospfd): Crash by processing LS-Update OSPF packet due improper length check of the Network-LSA structures\n817580 - CVE-2012-1820 quagga (bgpd): Assertion failure by processing BGP OPEN message with malformed ORF capability TLV (VU#962587)\n\n6. Package List:\n\nRed Hat Enterprise Linux Server (v. 6):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/quagga-0.99.15-7.el6_3.2.src.rpm\n\ni386:\nquagga-0.99.15-7.el6_3.2.i686.rpm\nquagga-debuginfo-0.99.15-7.el6_3.2.i686.rpm\n\nppc64:\nquagga-0.99.15-7.el6_3.2.ppc64.rpm\nquagga-debuginfo-0.99.15-7.el6_3.2.ppc64.rpm\n\ns390x:\nquagga-0.99.15-7.el6_3.2.s390x.rpm\nquagga-debuginfo-0.99.15-7.el6_3.2.s390x.rpm\n\nx86_64:\nquagga-0.99.15-7.el6_3.2.x86_64.rpm\nquagga-debuginfo-0.99.15-7.el6_3.2.x86_64.rpm\n\nRed Hat Enterprise Linux Server Optional (v. 6):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/quagga-0.99.15-7.el6_3.2.src.rpm\n\ni386:\nquagga-contrib-0.99.15-7.el6_3.2.i686.rpm\nquagga-debuginfo-0.99.15-7.el6_3.2.i686.rpm\nquagga-devel-0.99.15-7.el6_3.2.i686.rpm\n\nppc64:\nquagga-contrib-0.99.15-7.el6_3.2.ppc64.rpm\nquagga-debuginfo-0.99.15-7.el6_3.2.ppc.rpm\nquagga-debuginfo-0.99.15-7.el6_3.2.ppc64.rpm\nquagga-devel-0.99.15-7.el6_3.2.ppc.rpm\nquagga-devel-0.99.15-7.el6_3.2.ppc64.rpm\n\ns390x:\nquagga-contrib-0.99.15-7.el6_3.2.s390x.rpm\nquagga-debuginfo-0.99.15-7.el6_3.2.s390.rpm\nquagga-debuginfo-0.99.15-7.el6_3.2.s390x.rpm\nquagga-devel-0.99.15-7.el6_3.2.s390.rpm\nquagga-devel-0.99.15-7.el6_3.2.s390x.rpm\n\nx86_64:\nquagga-contrib-0.99.15-7.el6_3.2.x86_64.rpm\nquagga-debuginfo-0.99.15-7.el6_3.2.i686.rpm\nquagga-debuginfo-0.99.15-7.el6_3.2.x86_64.rpm\nquagga-devel-0.99.15-7.el6_3.2.i686.rpm\nquagga-devel-0.99.15-7.el6_3.2.x86_64.rpm\n\nRed Hat Enterprise Linux Workstation (v. 6):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Workstation/en/os/SRPMS/quagga-0.99.15-7.el6_3.2.src.rpm\n\ni386:\nquagga-0.99.15-7.el6_3.2.i686.rpm\nquagga-debuginfo-0.99.15-7.el6_3.2.i686.rpm\n\nx86_64:\nquagga-0.99.15-7.el6_3.2.x86_64.rpm\nquagga-debuginfo-0.99.15-7.el6_3.2.x86_64.rpm\n\nRed Hat Enterprise Linux Workstation Optional (v. 6):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Workstation/en/os/SRPMS/quagga-0.99.15-7.el6_3.2.src.rpm\n\ni386:\nquagga-contrib-0.99.15-7.el6_3.2.i686.rpm\nquagga-debuginfo-0.99.15-7.el6_3.2.i686.rpm\nquagga-devel-0.99.15-7.el6_3.2.i686.rpm\n\nx86_64:\nquagga-contrib-0.99.15-7.el6_3.2.x86_64.rpm\nquagga-debuginfo-0.99.15-7.el6_3.2.i686.rpm\nquagga-debuginfo-0.99.15-7.el6_3.2.x86_64.rpm\nquagga-devel-0.99.15-7.el6_3.2.i686.rpm\nquagga-devel-0.99.15-7.el6_3.2.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security. Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/#package\n\n7. References:\n\nhttps://www.redhat.com/security/data/cve/CVE-2011-3323.html\nhttps://www.redhat.com/security/data/cve/CVE-2011-3324.html\nhttps://www.redhat.com/security/data/cve/CVE-2011-3325.html\nhttps://www.redhat.com/security/data/cve/CVE-2011-3326.html\nhttps://www.redhat.com/security/data/cve/CVE-2011-3327.html\nhttps://www.redhat.com/security/data/cve/CVE-2012-0249.html\nhttps://www.redhat.com/security/data/cve/CVE-2012-0250.html\nhttps://www.redhat.com/security/data/cve/CVE-2012-0255.html\nhttps://www.redhat.com/security/data/cve/CVE-2012-1820.html\nhttps://access.redhat.com/security/updates/classification/#moderate\n\n8. Contact:\n\nThe Red Hat security contact is <secalert@redhat.com>. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2012 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.4.4 (GNU/Linux)\n\niD8DBQFQUOxMXlSAg2UNWIIRAspnAKDCd5umtQIWFZYD8vyRPpCkAlgiwwCglw+g\nP4VSjxs4xRnVCtT/IOkBkKQ=\n=VtuC\n-----END PGP SIGNATURE-----\n\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://www.redhat.com/mailman/listinfo/rhsa-announce", sources: [ { db: "NVD", id: "CVE-2011-3325", }, { db: "CERT/CC", id: "VU#668534", }, { db: "JVNDB", id: "JVNDB-2011-002370", }, { db: "BID", id: "49784", }, { db: "PACKETSTORM", id: "110033", }, { db: "PACKETSTORM", id: "107001", }, { db: "PACKETSTORM", id: "106135", }, { db: "PACKETSTORM", id: "116468", }, { db: "PACKETSTORM", id: "116469", }, ], trust: 3.06, }, external_ids: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { db: "CERT/CC", id: "VU#668534", trust: 3.5, }, { db: "NVD", id: "CVE-2011-3325", trust: 3.1, }, { db: "SECUNIA", id: "46139", trust: 1.6, }, { db: "SECUNIA", id: "46274", trust: 1, }, { db: "SECUNIA", id: "48106", trust: 1, }, { db: "JVNDB", id: "JVNDB-2011-002370", trust: 0.8, }, { db: "SECUNIA", id: "46244", trust: 0.7, }, { db: "SECUNIA", id: "46214", trust: 0.6, }, { db: "DEBIAN", id: "DSA-2316", trust: 0.6, }, { db: "CNNVD", id: "CNNVD-201109-585", trust: 0.6, }, { db: "BID", id: "49784", trust: 0.3, }, { db: "PACKETSTORM", id: "110033", trust: 0.1, }, { db: "PACKETSTORM", id: "107001", trust: 0.1, }, { db: "PACKETSTORM", id: "106135", trust: 0.1, }, { db: "PACKETSTORM", id: "116468", trust: 0.1, }, { db: "PACKETSTORM", id: "116469", trust: 0.1, }, ], sources: [ { db: "CERT/CC", id: "VU#668534", }, { db: "BID", id: "49784", }, { db: "JVNDB", id: "JVNDB-2011-002370", }, { db: "PACKETSTORM", id: "110033", }, { db: "PACKETSTORM", id: "107001", }, { db: "PACKETSTORM", id: "106135", }, { db: "PACKETSTORM", id: "116468", }, { db: "PACKETSTORM", id: "116469", }, { db: "CNNVD", id: "CNNVD-201109-585", }, { db: "NVD", id: "CVE-2011-3325", }, ], }, id: "VAR-201110-0442", iot: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: true, sources: [ { db: "VARIoT devices database", id: null, }, ], trust: 0.25897437, }, last_update_date: "2024-11-29T22:39:20.695000Z", patch: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { title: "Top Page", trust: 0.8, url: "http://www.quagga.net", }, { title: "ospfd: CVE-2011-3325 part 1", trust: 0.8, url: "http://code.quagga.net/?p=quagga.git;a=commit;h=61ab0301606053192f45c188bc48afc837518770", }, { title: "ospfd: CVE-2011-3325 part 2", trust: 0.8, url: "http://code.quagga.net/?p=quagga.git;a=commit;h=717750433839762d23a5f8d88fe0b4d57c8d490a", }, { title: "quagga-0.99.19.changelog", trust: 0.8, url: "http://www.quagga.net/download/quagga-0.99.19.changelog.txt", }, { title: "RHSA-2012:1259", trust: 0.8, url: "http://rhn.redhat.com/errata/RHSA-2012-1259.html", }, { title: "Multiple Denial of Service vulnerabilities in Quagga", trust: 0.8, url: "https://blogs.oracle.com/sunsecurity/entry/multiple_denial_of_service_vulnerabilities5", }, { title: "偽装されたOSPF(v2,v3)パケットに対する受信処理の脆弱性", trust: 0.8, url: "http://www.seil.jp/support/security/a01141.html", }, { title: "quagga-0.99.19", trust: 0.6, url: "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=40714", }, { title: "quagga-master-513254", trust: 0.6, url: "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=40715", }, { title: "quagga.git-94431dbc753171b48b5c6806af97fd690813b00a", trust: 0.6, url: "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=40713", }, ], sources: [ { db: "JVNDB", id: "JVNDB-2011-002370", }, { db: "CNNVD", id: "CNNVD-201109-585", }, ], }, problemtype_data: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { problemtype: "CWE-399", trust: 1.8, }, ], sources: [ { db: "JVNDB", id: "JVNDB-2011-002370", }, { db: "NVD", id: "CVE-2011-3325", }, ], }, references: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { trust: 2.7, url: "https://www.cert.fi/en/reports/2011/vulnerability539178.html", }, { trust: 2.7, url: "http://www.kb.cert.org/vuls/id/668534", }, { trust: 1.6, url: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", }, { trust: 1.6, url: "http://www.quagga.net/download/quagga-0.99.19.changelog.txt", }, { trust: 1.6, url: "http://www.debian.org/security/2011/dsa-2316", }, { trust: 1.6, url: "http://secunia.com/advisories/46139", }, { trust: 1.4, url: "http://rhn.redhat.com/errata/rhsa-2012-1258.html", }, { trust: 1.4, url: "http://rhn.redhat.com/errata/rhsa-2012-1259.html", }, { trust: 1.1, url: "http://security.gentoo.org/glsa/glsa-201202-02.xml", }, { trust: 1, url: "http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00027.html", }, { trust: 1, url: "http://secunia.com/advisories/46274", }, { trust: 1, url: "http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html", }, { trust: 1, url: "http://code.quagga.net/?p=quagga.git%3ba=commit%3bh=717750433839762d23a5f8d88fe0b4d57c8d490a", }, { trust: 1, url: "http://secunia.com/advisories/48106", }, { trust: 1, url: "http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00007.html", }, { trust: 1, url: "http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00010.html", }, { trust: 1, url: "http://code.quagga.net/?p=quagga.git%3ba=commit%3bh=61ab0301606053192f45c188bc48afc837518770", }, { trust: 0.8, url: "about vulnerability notes", }, { trust: 0.8, url: "contact us about this vulnerability", }, { trust: 0.8, url: "provide a vendor statement", }, { trust: 0.8, url: "https://bugzilla.redhat.com/show_bug.cgi?id=cve-2011-3327", }, { trust: 0.8, url: "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-3325", }, { trust: 0.8, url: "http://jvn.jp/cert/jvnvu668534", }, { trust: 0.8, url: "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-3325", }, { trust: 0.6, url: "http://code.quagga.net/?p=quagga.git;a=commit;h=717750433839762d23a5f8d88fe0b4d57c8d490a", }, { trust: 0.6, url: "http://code.quagga.net/?p=quagga.git;a=commit;h=61ab0301606053192f45c188bc48afc837518770", }, { trust: 0.6, url: "http://secunia.com/advisories/46214", }, { trust: 0.6, url: "http://secunia.com/advisories/46244", }, { trust: 0.4, url: "https://nvd.nist.gov/vuln/detail/cve-2011-3323", }, { trust: 0.4, url: "https://nvd.nist.gov/vuln/detail/cve-2011-3326", }, { trust: 0.4, url: "https://nvd.nist.gov/vuln/detail/cve-2011-3325", }, { trust: 0.4, url: "https://nvd.nist.gov/vuln/detail/cve-2011-3324", }, { trust: 0.4, url: "https://nvd.nist.gov/vuln/detail/cve-2011-3327", }, { trust: 0.3, url: "http://www.quagga.net/news2.php?y=2011&m=9&d=26#id1285509600", }, { trust: 0.3, url: "http://www.quagga.net/", }, { trust: 0.2, url: "https://nvd.nist.gov/vuln/detail/cve-2010-1674", }, { trust: 0.2, url: "https://www.redhat.com/security/data/cve/cve-2011-3323.html", }, { trust: 0.2, url: "https://nvd.nist.gov/vuln/detail/cve-2012-0250", }, { trust: 0.2, url: "https://www.redhat.com/security/data/cve/cve-2011-3325.html", }, { trust: 0.2, url: "https://www.redhat.com/security/data/cve/cve-2011-3324.html", }, { trust: 0.2, url: "https://nvd.nist.gov/vuln/detail/cve-2012-0249", }, { trust: 0.2, url: "https://access.redhat.com/security/team/contact/", }, { trust: 0.2, url: "https://www.redhat.com/mailman/listinfo/rhsa-announce", }, { trust: 0.2, url: "https://www.redhat.com/security/data/cve/cve-2012-0249.html", }, { trust: 0.2, url: "https://access.redhat.com/security/updates/classification/#moderate", }, { trust: 0.2, url: "https://www.redhat.com/security/data/cve/cve-2012-0250.html", }, { trust: 0.2, url: "https://access.redhat.com/knowledge/articles/11258", }, { trust: 0.2, url: "https://www.redhat.com/security/data/cve/cve-2011-3326.html", }, { trust: 0.2, url: "https://access.redhat.com/security/team/key/#package", }, { trust: 0.2, url: "https://www.redhat.com/security/data/cve/cve-2011-3327.html", }, { trust: 0.2, url: "http://bugzilla.redhat.com/):", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-1674", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-2949", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-3325", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-3324", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-1675", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2010-2948", }, { trust: 0.1, url: "http://creativecommons.org/licenses/by-sa/2.5", }, { trust: 0.1, url: "http://security.gentoo.org/", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-3326", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-3327", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-3323", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-2948", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2010-2949", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2010-1675", }, { trust: 0.1, url: "https://bugs.gentoo.org.", }, { trust: 0.1, url: "https://launchpad.net/ubuntu/+source/quagga/0.99.17-4ubuntu1.1", }, { trust: 0.1, url: "https://launchpad.net/ubuntu/+source/quagga/0.99.15-1ubuntu0.3", }, { trust: 0.1, url: "https://launchpad.net/ubuntu/+source/quagga/0.99.18-2ubuntu0.1", }, { trust: 0.1, url: "https://launchpad.net/ubuntu/+source/quagga/0.99.17-1ubuntu0.2", }, { trust: 0.1, url: "http://www.ubuntu.com/usn/usn-1261-1", }, { trust: 0.1, url: "https://ca.secunia.com/?page=viewadvisory&vuln_id=46244", }, { trust: 0.1, url: "http://secunia.com/vulnerability_intelligence/", }, { trust: 0.1, url: "http://secunia.com/advisories/secunia_security_advisories/", }, { trust: 0.1, url: "http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/", }, { trust: 0.1, url: "http://secunia.com/advisories/46244/#comments", }, { trust: 0.1, url: "http://secunia.com/vulnerability_scanning/personal/", }, { trust: 0.1, url: "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org", }, { trust: 0.1, url: "http://secunia.com/products/corporate/vim/ovum_2011_request/", }, { trust: 0.1, url: "http://secunia.com/advisories/46244/", }, { trust: 0.1, url: "http://www.sabadkharid.com/news/19/%d9%82%d8%a7%d8%a8%d9%84-%d8%aa%d9%88%d8%ac%d9%87-%d9%85%d8%b4%d8%aa%d8%b1%db%8c%d8%a7%d9%86-%d9%82%d8%af%db%8c%d9%85%db%8c-%d9%86%d8%b3%d8%ae%d9%87-%d8%ad%d8%b1%d9%81%d9%87-%d8%a7%db%8c!.html", }, { trust: 0.1, url: "http://secunia.com/advisories/about_secunia_advisories/", }, { trust: 0.1, url: "https://www.redhat.com/security/data/cve/cve-2010-1674.html", }, { trust: 0.1, url: "https://www.redhat.com/security/data/cve/cve-2012-0255.html", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2012-0255", }, { trust: 0.1, url: "https://www.redhat.com/security/data/cve/cve-2012-1820.html", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2012-1820", }, ], sources: [ { db: "CERT/CC", id: "VU#668534", }, { db: "BID", id: "49784", }, { db: "JVNDB", id: "JVNDB-2011-002370", }, { db: "PACKETSTORM", id: "110033", }, { db: "PACKETSTORM", id: "107001", }, { db: "PACKETSTORM", id: "106135", }, { db: "PACKETSTORM", id: "116468", }, { db: "PACKETSTORM", id: "116469", }, { db: "CNNVD", id: "CNNVD-201109-585", }, { db: "NVD", id: "CVE-2011-3325", }, ], }, sources: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", data: { "@container": "@list", }, }, data: [ { db: "CERT/CC", id: "VU#668534", }, { db: "BID", id: "49784", }, { db: "JVNDB", id: "JVNDB-2011-002370", }, { db: "PACKETSTORM", id: "110033", }, { db: "PACKETSTORM", id: "107001", }, { db: "PACKETSTORM", id: "106135", }, { db: "PACKETSTORM", id: "116468", }, { db: "PACKETSTORM", id: "116469", }, { db: "CNNVD", id: "CNNVD-201109-585", }, { db: "NVD", id: "CVE-2011-3325", }, ], }, sources_release_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", data: { "@container": "@list", }, }, data: [ { date: "2011-09-26T00:00:00", db: "CERT/CC", id: "VU#668534", }, { date: "2011-09-26T00:00:00", db: "BID", id: "49784", }, { date: "2011-10-14T00:00:00", db: "JVNDB", id: "JVNDB-2011-002370", }, { date: "2012-02-22T02:10:03", db: "PACKETSTORM", id: "110033", }, { date: "2011-11-15T15:35:22", db: "PACKETSTORM", id: "107001", }, { date: "2011-10-24T07:34:49", db: "PACKETSTORM", id: "106135", }, { date: "2012-09-12T23:06:05", db: "PACKETSTORM", id: "116468", }, { date: "2012-09-12T23:06:22", db: "PACKETSTORM", id: "116469", }, { date: "2011-09-29T00:00:00", db: "CNNVD", id: "CNNVD-201109-585", }, { date: "2011-10-10T10:55:06.503000", db: "NVD", id: "CVE-2011-3325", }, ], }, sources_update_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", data: { "@container": "@list", }, }, data: [ { date: "2011-10-06T00:00:00", db: "CERT/CC", id: "VU#668534", }, { date: "2015-04-13T21:15:00", db: "BID", id: "49784", }, { date: "2012-11-13T00:00:00", db: "JVNDB", id: "JVNDB-2011-002370", }, { date: "2011-10-09T00:00:00", db: "CNNVD", id: "CNNVD-201109-585", }, { date: "2024-11-21T01:30:16.137000", db: "NVD", id: "CVE-2011-3325", }, ], }, threat_type: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "remote", sources: [ { db: "PACKETSTORM", id: "110033", }, { db: "PACKETSTORM", id: "107001", }, { db: "CNNVD", id: "CNNVD-201109-585", }, ], trust: 0.8, }, title: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "Multiple Quagga remote component vulnerabilities", sources: [ { db: "CERT/CC", id: "VU#668534", }, ], trust: 0.8, }, type: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "resource management error", sources: [ { db: "CNNVD", id: "CNNVD-201109-585", }, ], trust: 0.6, }, }
rhsa-2012:1259
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Updated quagga packages that fix multiple security issues are now available\nfor Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.", title: "Topic", }, { category: "general", text: "Quagga is a TCP/IP based routing software suite. The Quagga bgpd daemon\nimplements the BGP (Border Gateway Protocol) routing protocol. The Quagga\nospfd and ospf6d daemons implement the OSPF (Open Shortest Path First)\nrouting protocol.\n\nA heap-based buffer overflow flaw was found in the way the bgpd daemon\nprocessed malformed Extended Communities path attributes. An attacker could\nsend a specially-crafted BGP message, causing bgpd on a target system to\ncrash or, possibly, execute arbitrary code with the privileges of the user\nrunning bgpd. The UPDATE message would have to arrive from an explicitly\nconfigured BGP peer, but could have originated elsewhere in the BGP\nnetwork. (CVE-2011-3327)\n\nA stack-based buffer overflow flaw was found in the way the ospf6d daemon\nprocessed malformed Link State Update packets. An OSPF router could use\nthis flaw to crash ospf6d on an adjacent router. (CVE-2011-3323)\n\nA flaw was found in the way the ospf6d daemon processed malformed link\nstate advertisements. An OSPF neighbor could use this flaw to crash\nospf6d on a target system. (CVE-2011-3324)\n\nA flaw was found in the way the ospfd daemon processed malformed Hello\npackets. An OSPF neighbor could use this flaw to crash ospfd on a\ntarget system. (CVE-2011-3325)\n\nA flaw was found in the way the ospfd daemon processed malformed link state\nadvertisements. An OSPF router in the autonomous system could use this flaw\nto crash ospfd on a target system. (CVE-2011-3326)\n\nAn assertion failure was found in the way the ospfd daemon processed\ncertain Link State Update packets. An OSPF router could use this flaw to\ncause ospfd on an adjacent router to abort. (CVE-2012-0249)\n\nA buffer overflow flaw was found in the way the ospfd daemon processed\ncertain Link State Update packets. An OSPF router could use this flaw to\ncrash ospfd on an adjacent router. (CVE-2012-0250)\n\nTwo flaws were found in the way the bgpd daemon processed certain BGP OPEN\nmessages. A configured BGP peer could cause bgpd on a target system to\nabort via a specially-crafted BGP OPEN message. (CVE-2012-0255,\nCVE-2012-1820)\n\nRed Hat would like to thank CERT-FI for reporting CVE-2011-3327,\nCVE-2011-3323, CVE-2011-3324, CVE-2011-3325, and CVE-2011-3326; and the\nCERT/CC for reporting CVE-2012-0249, CVE-2012-0250, CVE-2012-0255, and\nCVE-2012-1820. CERT-FI acknowledges Riku Hietamäki, Tuomo Untinen and Jukka\nTaimisto of the Codenomicon CROSS project as the original reporters of\nCVE-2011-3327, CVE-2011-3323, CVE-2011-3324, CVE-2011-3325, and\nCVE-2011-3326. The CERT/CC acknowledges Martin Winter at\nOpenSourceRouting.org as the original reporter of CVE-2012-0249,\nCVE-2012-0250, and CVE-2012-0255, and Denis Ovsienko as the original\nreporter of CVE-2012-1820.\n\nUsers of quagga should upgrade to these updated packages, which contain\nbackported patches to correct these issues. After installing the updated\npackages, the bgpd, ospfd, and ospf6d daemons will be restarted\nautomatically.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2012:1259", url: "https://access.redhat.com/errata/RHSA-2012:1259", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "738393", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738393", }, { category: "external", summary: "738394", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738394", }, { category: "external", summary: "738396", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", }, { category: "external", summary: "738398", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738398", }, { category: "external", summary: "738400", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738400", }, { category: "external", summary: "802781", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802781", }, { category: "external", summary: "802827", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802827", }, { category: "external", summary: "802829", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802829", }, { category: "external", summary: "817580", url: "https://bugzilla.redhat.com/show_bug.cgi?id=817580", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1259.json", }, ], title: "Red Hat Security Advisory: quagga security update", tracking: { current_release_date: "2024-11-22T05:38:20+00:00", generator: { date: "2024-11-22T05:38:20+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2012:1259", initial_release_date: "2012-09-12T19:59:00+00:00", revision_history: [ { date: "2012-09-12T19:59:00+00:00", number: "1", summary: "Initial version", }, { date: "2012-09-12T20:00:43+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T05:38:20+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 6)", product: { name: "Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 6)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Optional (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", product: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", product_id: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.99.15-7.el6_3.2?arch=ppc64", }, }, }, { category: "product_version", name: "quagga-0:0.99.15-7.el6_3.2.ppc64", product: { name: "quagga-0:0.99.15-7.el6_3.2.ppc64", product_id: "quagga-0:0.99.15-7.el6_3.2.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.99.15-7.el6_3.2?arch=ppc64", }, }, }, { category: "product_version", name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64", product: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64", product_id: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.99.15-7.el6_3.2?arch=ppc64", }, }, }, { category: "product_version", name: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", product: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", product_id: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.99.15-7.el6_3.2?arch=ppc64", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", product: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", product_id: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.99.15-7.el6_3.2?arch=i686", }, }, }, { category: "product_version", name: "quagga-0:0.99.15-7.el6_3.2.i686", product: { name: "quagga-0:0.99.15-7.el6_3.2.i686", product_id: "quagga-0:0.99.15-7.el6_3.2.i686", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.99.15-7.el6_3.2?arch=i686", }, }, }, { category: "product_version", name: "quagga-devel-0:0.99.15-7.el6_3.2.i686", product: { name: "quagga-devel-0:0.99.15-7.el6_3.2.i686", product_id: "quagga-devel-0:0.99.15-7.el6_3.2.i686", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.99.15-7.el6_3.2?arch=i686", }, }, }, { category: "product_version", name: "quagga-contrib-0:0.99.15-7.el6_3.2.i686", product: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.i686", product_id: "quagga-contrib-0:0.99.15-7.el6_3.2.i686", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.99.15-7.el6_3.2?arch=i686", }, }, }, ], category: "architecture", name: "i686", }, { branches: [ { category: "product_version", name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", product: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", product_id: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.99.15-7.el6_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "quagga-0:0.99.15-7.el6_3.2.x86_64", product: { name: "quagga-0:0.99.15-7.el6_3.2.x86_64", product_id: "quagga-0:0.99.15-7.el6_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.99.15-7.el6_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64", product: { name: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64", product_id: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.99.15-7.el6_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", product: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", product_id: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.99.15-7.el6_3.2?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", product: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", product_id: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.99.15-7.el6_3.2?arch=s390x", }, }, }, { category: "product_version", name: "quagga-0:0.99.15-7.el6_3.2.s390x", product: { name: "quagga-0:0.99.15-7.el6_3.2.s390x", product_id: "quagga-0:0.99.15-7.el6_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.99.15-7.el6_3.2?arch=s390x", }, }, }, { category: "product_version", name: "quagga-devel-0:0.99.15-7.el6_3.2.s390x", product: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390x", product_id: "quagga-devel-0:0.99.15-7.el6_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.99.15-7.el6_3.2?arch=s390x", }, }, }, { category: "product_version", name: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x", product: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x", product_id: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.99.15-7.el6_3.2?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "quagga-0:0.99.15-7.el6_3.2.src", product: { name: "quagga-0:0.99.15-7.el6_3.2.src", product_id: "quagga-0:0.99.15-7.el6_3.2.src", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.99.15-7.el6_3.2?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", product: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", product_id: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.99.15-7.el6_3.2?arch=s390", }, }, }, { category: "product_version", name: "quagga-devel-0:0.99.15-7.el6_3.2.s390", product: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390", product_id: "quagga-devel-0:0.99.15-7.el6_3.2.s390", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.99.15-7.el6_3.2?arch=s390", }, }, }, ], category: "architecture", name: "s390", }, { branches: [ { category: "product_version", name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", product: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", product_id: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.99.15-7.el6_3.2?arch=ppc", }, }, }, { category: "product_version", name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc", product: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc", product_id: "quagga-devel-0:0.99.15-7.el6_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.99.15-7.el6_3.2?arch=ppc", }, }, }, ], category: "architecture", name: "ppc", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.src as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.src", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.src", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.src", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.src", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3323", cwe: { id: "CWE-121", name: "Stack-based Buffer Overflow", }, discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738393", }, ], notes: [ { category: "description", text: "The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (out-of-bounds memory access and daemon crash) via a Link State Update message with an invalid IPv6 prefix length.", title: "Vulnerability description", }, { category: "summary", text: "(ospf6d): Stack-based buffer overflow while decoding Link State Update packet with malformed Inter Area Prefix LSA", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3323", }, { category: "external", summary: "RHBZ#738393", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738393", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3323", url: "https://www.cve.org/CVERecord?id=CVE-2011-3323", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3323", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3323", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.4, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:A/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospf6d): Stack-based buffer overflow while decoding Link State Update packet with malformed Inter Area Prefix LSA", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3324", discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738394", }, ], notes: [ { category: "description", text: "The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via trailing zero values in the Link State Advertisement (LSA) header list of an IPv6 Database Description message.", title: "Vulnerability description", }, { category: "summary", text: "(ospf6d): Denial of service by decoding malformed Database Description packet headers", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3324", }, { category: "external", summary: "RHBZ#738394", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738394", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3324", url: "https://www.cve.org/CVERecord?id=CVE-2011-3324", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3324", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3324", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospf6d): Denial of service by decoding malformed Database Description packet headers", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3325", discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738396", }, ], notes: [ { category: "description", text: "ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Denial of service by decoding too short Hello packet or Hello packet with invalid OSPFv2 header type", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3325", }, { category: "external", summary: "RHBZ#738396", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3325", url: "https://www.cve.org/CVERecord?id=CVE-2011-3325", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3325", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3325", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Denial of service by decoding too short Hello packet or Hello packet with invalid OSPFv2 header type", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3326", discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738398", }, ], notes: [ { category: "description", text: "The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via an invalid Link State Advertisement (LSA) type in an IPv4 Link State Update message.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Denial of service by decoding Link State Update LSAs of unknown type", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3326", }, { category: "external", summary: "RHBZ#738398", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738398", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3326", url: "https://www.cve.org/CVERecord?id=CVE-2011-3326", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3326", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3326", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Denial of service by decoding Link State Update LSAs of unknown type", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3327", cwe: { id: "CWE-122", name: "Heap-based Buffer Overflow", }, discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738400", }, ], notes: [ { category: "description", text: "Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by sending a crafted BGP UPDATE message over IPv4.", title: "Vulnerability description", }, { category: "summary", text: "(bgpd): Heap-based buffer overflow by decoding BGP UPDATE message with unknown AS_PATH attributes", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3327", }, { category: "external", summary: "RHBZ#738400", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738400", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3327", url: "https://www.cve.org/CVERecord?id=CVE-2011-3327", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3327", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3327", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.4, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:A/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "(bgpd): Heap-based buffer overflow by decoding BGP UPDATE message with unknown AS_PATH attributes", }, { acknowledgments: [ { names: [ "CERT/CC", ], }, ], cve: "CVE-2012-0249", discovery_date: "2012-03-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "802827", }, ], notes: [ { category: "description", text: "Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Assertion failure due improper length check for a received LS-Update OSPF packet", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2012-0249", }, { category: "external", summary: "RHBZ#802827", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802827", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2012-0249", url: "https://www.cve.org/CVERecord?id=CVE-2012-0249", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2012-0249", url: "https://nvd.nist.gov/vuln/detail/CVE-2012-0249", }, ], release_date: "2012-03-28T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Assertion failure due improper length check for a received LS-Update OSPF packet", }, { acknowledgments: [ { names: [ "CERT/CC", ], }, ], cve: "CVE-2012-0250", discovery_date: "2012-03-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "802829", }, ], notes: [ { category: "description", text: "Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (daemon crash) via a Link State Update (aka LS Update) packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the value in the Length header field.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Crash by processing LS-Update OSPF packet due improper length check of the Network-LSA structures", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2012-0250", }, { category: "external", summary: "RHBZ#802829", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802829", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2012-0250", url: "https://www.cve.org/CVERecord?id=CVE-2012-0250", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2012-0250", url: "https://nvd.nist.gov/vuln/detail/CVE-2012-0250", }, ], release_date: "2012-03-28T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Crash by processing LS-Update OSPF packet due improper length check of the Network-LSA structures", }, { acknowledgments: [ { names: [ "CERT/CC", ], }, ], cve: "CVE-2012-0255", discovery_date: "2012-03-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "802781", }, ], notes: [ { category: "description", text: "The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a message associated with a malformed Four-octet AS Number Capability (aka AS4 capability).", title: "Vulnerability description", }, { category: "summary", text: "(bgpd): Assertion failure by processing malformed AS4 capability in BGP OPEN message", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2012-0255", }, { category: "external", summary: "RHBZ#802781", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802781", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2012-0255", url: "https://www.cve.org/CVERecord?id=CVE-2012-0255", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2012-0255", url: "https://nvd.nist.gov/vuln/detail/CVE-2012-0255", }, ], release_date: "2012-03-28T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(bgpd): Assertion failure by processing malformed AS4 capability in BGP OPEN message", }, { acknowledgments: [ { names: [ "CERT/CC", ], }, ], cve: "CVE-2012-1820", discovery_date: "2012-04-25T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "817580", }, ], notes: [ { category: "description", text: "The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering (ORF) capability TLV in an OPEN message.", title: "Vulnerability description", }, { category: "summary", text: "(bgpd): Assertion failure by processing BGP OPEN message with malformed ORF capability TLV (VU#962587)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2012-1820", }, { category: "external", summary: "RHBZ#817580", url: "https://bugzilla.redhat.com/show_bug.cgi?id=817580", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2012-1820", url: "https://www.cve.org/CVERecord?id=CVE-2012-1820", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2012-1820", url: "https://nvd.nist.gov/vuln/detail/CVE-2012-1820", }, ], release_date: "2012-06-03T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(bgpd): Assertion failure by processing BGP OPEN message with malformed ORF capability TLV (VU#962587)", }, ], }
rhsa-2012:1258
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Updated quagga packages that fix multiple security issues are now available\nfor Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.", title: "Topic", }, { category: "general", text: "Quagga is a TCP/IP based routing software suite. The Quagga bgpd daemon\nimplements the BGP (Border Gateway Protocol) routing protocol. The Quagga\nospfd and ospf6d daemons implement the OSPF (Open Shortest Path First)\nrouting protocol.\n\nA heap-based buffer overflow flaw was found in the way the bgpd daemon\nprocessed malformed Extended Communities path attributes. An attacker could\nsend a specially-crafted BGP message, causing bgpd on a target system to\ncrash or, possibly, execute arbitrary code with the privileges of the user\nrunning bgpd. The UPDATE message would have to arrive from an explicitly\nconfigured BGP peer, but could have originated elsewhere in the BGP\nnetwork. (CVE-2011-3327)\n\nA NULL pointer dereference flaw was found in the way the bgpd daemon\nprocessed malformed route Extended Communities attributes. A configured\nBGP peer could crash bgpd on a target system via a specially-crafted BGP\nmessage. (CVE-2010-1674)\n\nA stack-based buffer overflow flaw was found in the way the ospf6d daemon\nprocessed malformed Link State Update packets. An OSPF router could use\nthis flaw to crash ospf6d on an adjacent router. (CVE-2011-3323)\n\nA flaw was found in the way the ospf6d daemon processed malformed link\nstate advertisements. An OSPF neighbor could use this flaw to crash\nospf6d on a target system. (CVE-2011-3324)\n\nA flaw was found in the way the ospfd daemon processed malformed Hello\npackets. An OSPF neighbor could use this flaw to crash ospfd on a\ntarget system. (CVE-2011-3325)\n\nA flaw was found in the way the ospfd daemon processed malformed link state\nadvertisements. An OSPF router in the autonomous system could use this flaw\nto crash ospfd on a target system. (CVE-2011-3326)\n\nAn assertion failure was found in the way the ospfd daemon processed\ncertain Link State Update packets. An OSPF router could use this flaw to\ncause ospfd on an adjacent router to abort. (CVE-2012-0249)\n\nA buffer overflow flaw was found in the way the ospfd daemon processed\ncertain Link State Update packets. An OSPF router could use this flaw to\ncrash ospfd on an adjacent router. (CVE-2012-0250)\n\nRed Hat would like to thank CERT-FI for reporting CVE-2011-3327,\nCVE-2011-3323, CVE-2011-3324, CVE-2011-3325, and CVE-2011-3326; and the\nCERT/CC for reporting CVE-2012-0249 and CVE-2012-0250. CERT-FI acknowledges\nRiku Hietamäki, Tuomo Untinen and Jukka Taimisto of the Codenomicon CROSS\nproject as the original reporters of CVE-2011-3327, CVE-2011-3323,\nCVE-2011-3324, CVE-2011-3325, and CVE-2011-3326. The CERT/CC acknowledges\nMartin Winter at OpenSourceRouting.org as the original reporter of\nCVE-2012-0249 and CVE-2012-0250.\n\nUsers of quagga should upgrade to these updated packages, which contain\nbackported patches to correct these issues. After installing the updated\npackages, the bgpd, ospfd, and ospf6d daemons will be restarted\nautomatically.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2012:1258", url: "https://access.redhat.com/errata/RHSA-2012:1258", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "654603", url: "https://bugzilla.redhat.com/show_bug.cgi?id=654603", }, { category: "external", summary: "738393", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738393", }, { category: "external", summary: "738394", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738394", }, { category: "external", summary: "738396", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", }, { category: "external", summary: "738398", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738398", }, { category: "external", summary: "738400", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738400", }, { category: "external", summary: "802827", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802827", }, { category: "external", summary: "802829", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802829", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1258.json", }, ], title: "Red Hat Security Advisory: quagga security update", tracking: { current_release_date: "2024-11-22T05:38:15+00:00", generator: { date: "2024-11-22T05:38:15+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2012:1258", initial_release_date: "2012-09-12T19:56:00+00:00", revision_history: [ { date: "2012-09-12T19:56:00+00:00", number: "1", summary: "Initial version", }, { date: "2012-09-12T20:02:35+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T05:38:15+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product: { name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::client", }, }, }, { category: "product_name", name: "RHEL Desktop Workstation (v. 5 client)", product: { name: "RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::client_workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux (v. 5 server)", product: { name: "Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::server", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "quagga-contrib-0:0.98.6-7.el5_8.1.i386", product: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.i386", product_id: "quagga-contrib-0:0.98.6-7.el5_8.1.i386", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.98.6-7.el5_8.1?arch=i386", }, }, }, { category: "product_version", name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", product: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", product_id: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.98.6-7.el5_8.1?arch=i386", }, }, }, { category: "product_version", name: "quagga-devel-0:0.98.6-7.el5_8.1.i386", product: { name: "quagga-devel-0:0.98.6-7.el5_8.1.i386", product_id: "quagga-devel-0:0.98.6-7.el5_8.1.i386", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.98.6-7.el5_8.1?arch=i386", }, }, }, { category: "product_version", name: "quagga-0:0.98.6-7.el5_8.1.i386", product: { name: "quagga-0:0.98.6-7.el5_8.1.i386", product_id: "quagga-0:0.98.6-7.el5_8.1.i386", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.98.6-7.el5_8.1?arch=i386", }, }, }, ], category: "architecture", name: "i386", }, { branches: [ { category: "product_version", name: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", product: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", product_id: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.98.6-7.el5_8.1?arch=x86_64", }, }, }, { category: "product_version", name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", product: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", product_id: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.98.6-7.el5_8.1?arch=x86_64", }, }, }, { category: "product_version", name: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64", product: { name: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64", product_id: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.98.6-7.el5_8.1?arch=x86_64", }, }, }, { category: "product_version", name: "quagga-0:0.98.6-7.el5_8.1.x86_64", product: { name: "quagga-0:0.98.6-7.el5_8.1.x86_64", product_id: "quagga-0:0.98.6-7.el5_8.1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.98.6-7.el5_8.1?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "quagga-0:0.98.6-7.el5_8.1.src", product: { name: "quagga-0:0.98.6-7.el5_8.1.src", product_id: "quagga-0:0.98.6-7.el5_8.1.src", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.98.6-7.el5_8.1?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "quagga-devel-0:0.98.6-7.el5_8.1.s390", product: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390", product_id: "quagga-devel-0:0.98.6-7.el5_8.1.s390", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.98.6-7.el5_8.1?arch=s390", }, }, }, { category: "product_version", name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", product: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", product_id: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.98.6-7.el5_8.1?arch=s390", }, }, }, ], category: "architecture", name: "s390", }, { branches: [ { category: "product_version", name: "quagga-devel-0:0.98.6-7.el5_8.1.s390x", product: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390x", product_id: "quagga-devel-0:0.98.6-7.el5_8.1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.98.6-7.el5_8.1?arch=s390x", }, }, }, { category: "product_version", name: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x", product: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x", product_id: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.98.6-7.el5_8.1?arch=s390x", }, }, }, { category: "product_version", name: "quagga-0:0.98.6-7.el5_8.1.s390x", product: { name: "quagga-0:0.98.6-7.el5_8.1.s390x", product_id: "quagga-0:0.98.6-7.el5_8.1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.98.6-7.el5_8.1?arch=s390x", }, }, }, { category: "product_version", name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", product: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", product_id: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.98.6-7.el5_8.1?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "quagga-devel-0:0.98.6-7.el5_8.1.ia64", product: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ia64", product_id: "quagga-devel-0:0.98.6-7.el5_8.1.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.98.6-7.el5_8.1?arch=ia64", }, }, }, { category: "product_version", name: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64", product: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64", product_id: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.98.6-7.el5_8.1?arch=ia64", }, }, }, { category: "product_version", name: "quagga-0:0.98.6-7.el5_8.1.ia64", product: { name: "quagga-0:0.98.6-7.el5_8.1.ia64", product_id: "quagga-0:0.98.6-7.el5_8.1.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.98.6-7.el5_8.1?arch=ia64", }, }, }, { category: "product_version", name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", product: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", product_id: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.98.6-7.el5_8.1?arch=ia64", }, }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64", product: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64", product_id: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.98.6-7.el5_8.1?arch=ppc64", }, }, }, { category: "product_version", name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", product: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", product_id: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.98.6-7.el5_8.1?arch=ppc64", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc", product: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc", product_id: "quagga-devel-0:0.98.6-7.el5_8.1.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.98.6-7.el5_8.1?arch=ppc", }, }, }, { category: "product_version", name: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc", product: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc", product_id: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.98.6-7.el5_8.1?arch=ppc", }, }, }, { category: "product_version", name: "quagga-0:0.98.6-7.el5_8.1.ppc", product: { name: "quagga-0:0.98.6-7.el5_8.1.ppc", product_id: "quagga-0:0.98.6-7.el5_8.1.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.98.6-7.el5_8.1?arch=ppc", }, }, }, { category: "product_version", name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", product: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", product_id: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.98.6-7.el5_8.1?arch=ppc", }, }, }, ], category: "architecture", name: "ppc", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.src", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.s390", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.i386 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.ia64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.ppc as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.s390x as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.src as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.src", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.x86_64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.i386 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.i386 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ia64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.s390", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390x as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.src as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.src", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.s390", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Server-5.8.Z", }, ], }, vulnerabilities: [ { cve: "CVE-2010-1674", discovery_date: "2010-11-17T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "654603", }, ], notes: [ { category: "description", text: "The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed Extended Communities attribute.", title: "Vulnerability description", }, { category: "summary", text: "quagga: DoS (crash) by processing malformed extended community attribute in a route", title: "Vulnerability summary", }, { category: "other", text: "Vulnerable. This issue affects quagga packages in Red Hat Enterprise\nLinux 4 and 5. The Red Hat Security Response Team has rated this issue\nas having low security impact, a future update may address this flaw.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2010-1674", }, { category: "external", summary: "RHBZ#654603", url: "https://bugzilla.redhat.com/show_bug.cgi?id=654603", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2010-1674", url: "https://www.cve.org/CVERecord?id=CVE-2010-1674", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2010-1674", url: "https://nvd.nist.gov/vuln/detail/CVE-2010-1674", }, ], release_date: "2011-03-21T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 1.8, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:H/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "quagga: DoS (crash) by processing malformed extended community attribute in a route", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3323", cwe: { id: "CWE-121", name: "Stack-based Buffer Overflow", }, discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738393", }, ], notes: [ { category: "description", text: "The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (out-of-bounds memory access and daemon crash) via a Link State Update message with an invalid IPv6 prefix length.", title: "Vulnerability description", }, { category: "summary", text: "(ospf6d): Stack-based buffer overflow while decoding Link State Update packet with malformed Inter Area Prefix LSA", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3323", }, { category: "external", summary: "RHBZ#738393", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738393", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3323", url: "https://www.cve.org/CVERecord?id=CVE-2011-3323", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3323", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3323", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.4, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:A/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospf6d): Stack-based buffer overflow while decoding Link State Update packet with malformed Inter Area Prefix LSA", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3324", discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738394", }, ], notes: [ { category: "description", text: "The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via trailing zero values in the Link State Advertisement (LSA) header list of an IPv6 Database Description message.", title: "Vulnerability description", }, { category: "summary", text: "(ospf6d): Denial of service by decoding malformed Database Description packet headers", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3324", }, { category: "external", summary: "RHBZ#738394", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738394", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3324", url: "https://www.cve.org/CVERecord?id=CVE-2011-3324", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3324", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3324", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospf6d): Denial of service by decoding malformed Database Description packet headers", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3325", discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738396", }, ], notes: [ { category: "description", text: "ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Denial of service by decoding too short Hello packet or Hello packet with invalid OSPFv2 header type", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3325", }, { category: "external", summary: "RHBZ#738396", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3325", url: "https://www.cve.org/CVERecord?id=CVE-2011-3325", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3325", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3325", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Denial of service by decoding too short Hello packet or Hello packet with invalid OSPFv2 header type", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3326", discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738398", }, ], notes: [ { category: "description", text: "The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via an invalid Link State Advertisement (LSA) type in an IPv4 Link State Update message.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Denial of service by decoding Link State Update LSAs of unknown type", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3326", }, { category: "external", summary: "RHBZ#738398", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738398", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3326", url: "https://www.cve.org/CVERecord?id=CVE-2011-3326", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3326", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3326", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Denial of service by decoding Link State Update LSAs of unknown type", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3327", cwe: { id: "CWE-122", name: "Heap-based Buffer Overflow", }, discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738400", }, ], notes: [ { category: "description", text: "Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by sending a crafted BGP UPDATE message over IPv4.", title: "Vulnerability description", }, { category: "summary", text: "(bgpd): Heap-based buffer overflow by decoding BGP UPDATE message with unknown AS_PATH attributes", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3327", }, { category: "external", summary: "RHBZ#738400", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738400", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3327", url: "https://www.cve.org/CVERecord?id=CVE-2011-3327", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3327", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3327", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.4, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:A/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "(bgpd): Heap-based buffer overflow by decoding BGP UPDATE message with unknown AS_PATH attributes", }, { acknowledgments: [ { names: [ "CERT/CC", ], }, ], cve: "CVE-2012-0249", discovery_date: "2012-03-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "802827", }, ], notes: [ { category: "description", text: "Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Assertion failure due improper length check for a received LS-Update OSPF packet", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2012-0249", }, { category: "external", summary: "RHBZ#802827", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802827", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2012-0249", url: "https://www.cve.org/CVERecord?id=CVE-2012-0249", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2012-0249", url: "https://nvd.nist.gov/vuln/detail/CVE-2012-0249", }, ], release_date: "2012-03-28T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Assertion failure due improper length check for a received LS-Update OSPF packet", }, { acknowledgments: [ { names: [ "CERT/CC", ], }, ], cve: "CVE-2012-0250", discovery_date: "2012-03-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "802829", }, ], notes: [ { category: "description", text: "Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (daemon crash) via a Link State Update (aka LS Update) packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the value in the Length header field.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Crash by processing LS-Update OSPF packet due improper length check of the Network-LSA structures", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2012-0250", }, { category: "external", summary: "RHBZ#802829", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802829", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2012-0250", url: "https://www.cve.org/CVERecord?id=CVE-2012-0250", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2012-0250", url: "https://nvd.nist.gov/vuln/detail/CVE-2012-0250", }, ], release_date: "2012-03-28T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Crash by processing LS-Update OSPF packet due improper length check of the Network-LSA structures", }, ], }
RHSA-2012:1259
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Updated quagga packages that fix multiple security issues are now available\nfor Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.", title: "Topic", }, { category: "general", text: "Quagga is a TCP/IP based routing software suite. The Quagga bgpd daemon\nimplements the BGP (Border Gateway Protocol) routing protocol. The Quagga\nospfd and ospf6d daemons implement the OSPF (Open Shortest Path First)\nrouting protocol.\n\nA heap-based buffer overflow flaw was found in the way the bgpd daemon\nprocessed malformed Extended Communities path attributes. An attacker could\nsend a specially-crafted BGP message, causing bgpd on a target system to\ncrash or, possibly, execute arbitrary code with the privileges of the user\nrunning bgpd. The UPDATE message would have to arrive from an explicitly\nconfigured BGP peer, but could have originated elsewhere in the BGP\nnetwork. (CVE-2011-3327)\n\nA stack-based buffer overflow flaw was found in the way the ospf6d daemon\nprocessed malformed Link State Update packets. An OSPF router could use\nthis flaw to crash ospf6d on an adjacent router. (CVE-2011-3323)\n\nA flaw was found in the way the ospf6d daemon processed malformed link\nstate advertisements. An OSPF neighbor could use this flaw to crash\nospf6d on a target system. (CVE-2011-3324)\n\nA flaw was found in the way the ospfd daemon processed malformed Hello\npackets. An OSPF neighbor could use this flaw to crash ospfd on a\ntarget system. (CVE-2011-3325)\n\nA flaw was found in the way the ospfd daemon processed malformed link state\nadvertisements. An OSPF router in the autonomous system could use this flaw\nto crash ospfd on a target system. (CVE-2011-3326)\n\nAn assertion failure was found in the way the ospfd daemon processed\ncertain Link State Update packets. An OSPF router could use this flaw to\ncause ospfd on an adjacent router to abort. (CVE-2012-0249)\n\nA buffer overflow flaw was found in the way the ospfd daemon processed\ncertain Link State Update packets. An OSPF router could use this flaw to\ncrash ospfd on an adjacent router. (CVE-2012-0250)\n\nTwo flaws were found in the way the bgpd daemon processed certain BGP OPEN\nmessages. A configured BGP peer could cause bgpd on a target system to\nabort via a specially-crafted BGP OPEN message. (CVE-2012-0255,\nCVE-2012-1820)\n\nRed Hat would like to thank CERT-FI for reporting CVE-2011-3327,\nCVE-2011-3323, CVE-2011-3324, CVE-2011-3325, and CVE-2011-3326; and the\nCERT/CC for reporting CVE-2012-0249, CVE-2012-0250, CVE-2012-0255, and\nCVE-2012-1820. CERT-FI acknowledges Riku Hietamäki, Tuomo Untinen and Jukka\nTaimisto of the Codenomicon CROSS project as the original reporters of\nCVE-2011-3327, CVE-2011-3323, CVE-2011-3324, CVE-2011-3325, and\nCVE-2011-3326. The CERT/CC acknowledges Martin Winter at\nOpenSourceRouting.org as the original reporter of CVE-2012-0249,\nCVE-2012-0250, and CVE-2012-0255, and Denis Ovsienko as the original\nreporter of CVE-2012-1820.\n\nUsers of quagga should upgrade to these updated packages, which contain\nbackported patches to correct these issues. After installing the updated\npackages, the bgpd, ospfd, and ospf6d daemons will be restarted\nautomatically.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2012:1259", url: "https://access.redhat.com/errata/RHSA-2012:1259", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "738393", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738393", }, { category: "external", summary: "738394", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738394", }, { category: "external", summary: "738396", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", }, { category: "external", summary: "738398", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738398", }, { category: "external", summary: "738400", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738400", }, { category: "external", summary: "802781", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802781", }, { category: "external", summary: "802827", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802827", }, { category: "external", summary: "802829", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802829", }, { category: "external", summary: "817580", url: "https://bugzilla.redhat.com/show_bug.cgi?id=817580", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1259.json", }, ], title: "Red Hat Security Advisory: quagga security update", tracking: { current_release_date: "2024-11-22T05:38:20+00:00", generator: { date: "2024-11-22T05:38:20+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2012:1259", initial_release_date: "2012-09-12T19:59:00+00:00", revision_history: [ { date: "2012-09-12T19:59:00+00:00", number: "1", summary: "Initial version", }, { date: "2012-09-12T20:00:43+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T05:38:20+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 6)", product: { name: "Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 6)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Optional (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", product: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", product_id: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.99.15-7.el6_3.2?arch=ppc64", }, }, }, { category: "product_version", name: "quagga-0:0.99.15-7.el6_3.2.ppc64", product: { name: "quagga-0:0.99.15-7.el6_3.2.ppc64", product_id: "quagga-0:0.99.15-7.el6_3.2.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.99.15-7.el6_3.2?arch=ppc64", }, }, }, { category: "product_version", name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64", product: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64", product_id: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.99.15-7.el6_3.2?arch=ppc64", }, }, }, { category: "product_version", name: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", product: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", product_id: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.99.15-7.el6_3.2?arch=ppc64", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", product: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", product_id: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.99.15-7.el6_3.2?arch=i686", }, }, }, { category: "product_version", name: "quagga-0:0.99.15-7.el6_3.2.i686", product: { name: "quagga-0:0.99.15-7.el6_3.2.i686", product_id: "quagga-0:0.99.15-7.el6_3.2.i686", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.99.15-7.el6_3.2?arch=i686", }, }, }, { category: "product_version", name: "quagga-devel-0:0.99.15-7.el6_3.2.i686", product: { name: "quagga-devel-0:0.99.15-7.el6_3.2.i686", product_id: "quagga-devel-0:0.99.15-7.el6_3.2.i686", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.99.15-7.el6_3.2?arch=i686", }, }, }, { category: "product_version", name: "quagga-contrib-0:0.99.15-7.el6_3.2.i686", product: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.i686", product_id: "quagga-contrib-0:0.99.15-7.el6_3.2.i686", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.99.15-7.el6_3.2?arch=i686", }, }, }, ], category: "architecture", name: "i686", }, { branches: [ { category: "product_version", name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", product: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", product_id: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.99.15-7.el6_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "quagga-0:0.99.15-7.el6_3.2.x86_64", product: { name: "quagga-0:0.99.15-7.el6_3.2.x86_64", product_id: "quagga-0:0.99.15-7.el6_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.99.15-7.el6_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64", product: { name: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64", product_id: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.99.15-7.el6_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", product: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", product_id: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.99.15-7.el6_3.2?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", product: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", product_id: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.99.15-7.el6_3.2?arch=s390x", }, }, }, { category: "product_version", name: "quagga-0:0.99.15-7.el6_3.2.s390x", product: { name: "quagga-0:0.99.15-7.el6_3.2.s390x", product_id: "quagga-0:0.99.15-7.el6_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.99.15-7.el6_3.2?arch=s390x", }, }, }, { category: "product_version", name: "quagga-devel-0:0.99.15-7.el6_3.2.s390x", product: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390x", product_id: "quagga-devel-0:0.99.15-7.el6_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.99.15-7.el6_3.2?arch=s390x", }, }, }, { category: "product_version", name: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x", product: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x", product_id: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.99.15-7.el6_3.2?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "quagga-0:0.99.15-7.el6_3.2.src", product: { name: "quagga-0:0.99.15-7.el6_3.2.src", product_id: "quagga-0:0.99.15-7.el6_3.2.src", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.99.15-7.el6_3.2?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", product: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", product_id: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.99.15-7.el6_3.2?arch=s390", }, }, }, { category: "product_version", name: "quagga-devel-0:0.99.15-7.el6_3.2.s390", product: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390", product_id: "quagga-devel-0:0.99.15-7.el6_3.2.s390", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.99.15-7.el6_3.2?arch=s390", }, }, }, ], category: "architecture", name: "s390", }, { branches: [ { category: "product_version", name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", product: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", product_id: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.99.15-7.el6_3.2?arch=ppc", }, }, }, { category: "product_version", name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc", product: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc", product_id: "quagga-devel-0:0.99.15-7.el6_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.99.15-7.el6_3.2?arch=ppc", }, }, }, ], category: "architecture", name: "ppc", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.src as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.src", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.src", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.src", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.src", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3323", cwe: { id: "CWE-121", name: "Stack-based Buffer Overflow", }, discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738393", }, ], notes: [ { category: "description", text: "The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (out-of-bounds memory access and daemon crash) via a Link State Update message with an invalid IPv6 prefix length.", title: "Vulnerability description", }, { category: "summary", text: "(ospf6d): Stack-based buffer overflow while decoding Link State Update packet with malformed Inter Area Prefix LSA", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3323", }, { category: "external", summary: "RHBZ#738393", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738393", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3323", url: "https://www.cve.org/CVERecord?id=CVE-2011-3323", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3323", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3323", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.4, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:A/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospf6d): Stack-based buffer overflow while decoding Link State Update packet with malformed Inter Area Prefix LSA", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3324", discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738394", }, ], notes: [ { category: "description", text: "The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via trailing zero values in the Link State Advertisement (LSA) header list of an IPv6 Database Description message.", title: "Vulnerability description", }, { category: "summary", text: "(ospf6d): Denial of service by decoding malformed Database Description packet headers", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3324", }, { category: "external", summary: "RHBZ#738394", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738394", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3324", url: "https://www.cve.org/CVERecord?id=CVE-2011-3324", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3324", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3324", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospf6d): Denial of service by decoding malformed Database Description packet headers", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3325", discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738396", }, ], notes: [ { category: "description", text: "ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Denial of service by decoding too short Hello packet or Hello packet with invalid OSPFv2 header type", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3325", }, { category: "external", summary: "RHBZ#738396", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3325", url: "https://www.cve.org/CVERecord?id=CVE-2011-3325", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3325", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3325", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Denial of service by decoding too short Hello packet or Hello packet with invalid OSPFv2 header type", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3326", discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738398", }, ], notes: [ { category: "description", text: "The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via an invalid Link State Advertisement (LSA) type in an IPv4 Link State Update message.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Denial of service by decoding Link State Update LSAs of unknown type", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3326", }, { category: "external", summary: "RHBZ#738398", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738398", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3326", url: "https://www.cve.org/CVERecord?id=CVE-2011-3326", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3326", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3326", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Denial of service by decoding Link State Update LSAs of unknown type", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3327", cwe: { id: "CWE-122", name: "Heap-based Buffer Overflow", }, discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738400", }, ], notes: [ { category: "description", text: "Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by sending a crafted BGP UPDATE message over IPv4.", title: "Vulnerability description", }, { category: "summary", text: "(bgpd): Heap-based buffer overflow by decoding BGP UPDATE message with unknown AS_PATH attributes", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3327", }, { category: "external", summary: "RHBZ#738400", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738400", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3327", url: "https://www.cve.org/CVERecord?id=CVE-2011-3327", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3327", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3327", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.4, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:A/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "(bgpd): Heap-based buffer overflow by decoding BGP UPDATE message with unknown AS_PATH attributes", }, { acknowledgments: [ { names: [ "CERT/CC", ], }, ], cve: "CVE-2012-0249", discovery_date: "2012-03-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "802827", }, ], notes: [ { category: "description", text: "Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Assertion failure due improper length check for a received LS-Update OSPF packet", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2012-0249", }, { category: "external", summary: "RHBZ#802827", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802827", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2012-0249", url: "https://www.cve.org/CVERecord?id=CVE-2012-0249", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2012-0249", url: "https://nvd.nist.gov/vuln/detail/CVE-2012-0249", }, ], release_date: "2012-03-28T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Assertion failure due improper length check for a received LS-Update OSPF packet", }, { acknowledgments: [ { names: [ "CERT/CC", ], }, ], cve: "CVE-2012-0250", discovery_date: "2012-03-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "802829", }, ], notes: [ { category: "description", text: "Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (daemon crash) via a Link State Update (aka LS Update) packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the value in the Length header field.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Crash by processing LS-Update OSPF packet due improper length check of the Network-LSA structures", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2012-0250", }, { category: "external", summary: "RHBZ#802829", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802829", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2012-0250", url: "https://www.cve.org/CVERecord?id=CVE-2012-0250", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2012-0250", url: "https://nvd.nist.gov/vuln/detail/CVE-2012-0250", }, ], release_date: "2012-03-28T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Crash by processing LS-Update OSPF packet due improper length check of the Network-LSA structures", }, { acknowledgments: [ { names: [ "CERT/CC", ], }, ], cve: "CVE-2012-0255", discovery_date: "2012-03-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "802781", }, ], notes: [ { category: "description", text: "The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a message associated with a malformed Four-octet AS Number Capability (aka AS4 capability).", title: "Vulnerability description", }, { category: "summary", text: "(bgpd): Assertion failure by processing malformed AS4 capability in BGP OPEN message", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2012-0255", }, { category: "external", summary: "RHBZ#802781", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802781", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2012-0255", url: "https://www.cve.org/CVERecord?id=CVE-2012-0255", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2012-0255", url: "https://nvd.nist.gov/vuln/detail/CVE-2012-0255", }, ], release_date: "2012-03-28T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(bgpd): Assertion failure by processing malformed AS4 capability in BGP OPEN message", }, { acknowledgments: [ { names: [ "CERT/CC", ], }, ], cve: "CVE-2012-1820", discovery_date: "2012-04-25T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "817580", }, ], notes: [ { category: "description", text: "The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering (ORF) capability TLV in an OPEN message.", title: "Vulnerability description", }, { category: "summary", text: "(bgpd): Assertion failure by processing BGP OPEN message with malformed ORF capability TLV (VU#962587)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2012-1820", }, { category: "external", summary: "RHBZ#817580", url: "https://bugzilla.redhat.com/show_bug.cgi?id=817580", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2012-1820", url: "https://www.cve.org/CVERecord?id=CVE-2012-1820", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2012-1820", url: "https://nvd.nist.gov/vuln/detail/CVE-2012-1820", }, ], release_date: "2012-06-03T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(bgpd): Assertion failure by processing BGP OPEN message with malformed ORF capability TLV (VU#962587)", }, ], }
rhsa-2012_1258
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Updated quagga packages that fix multiple security issues are now available\nfor Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.", title: "Topic", }, { category: "general", text: "Quagga is a TCP/IP based routing software suite. The Quagga bgpd daemon\nimplements the BGP (Border Gateway Protocol) routing protocol. The Quagga\nospfd and ospf6d daemons implement the OSPF (Open Shortest Path First)\nrouting protocol.\n\nA heap-based buffer overflow flaw was found in the way the bgpd daemon\nprocessed malformed Extended Communities path attributes. An attacker could\nsend a specially-crafted BGP message, causing bgpd on a target system to\ncrash or, possibly, execute arbitrary code with the privileges of the user\nrunning bgpd. The UPDATE message would have to arrive from an explicitly\nconfigured BGP peer, but could have originated elsewhere in the BGP\nnetwork. (CVE-2011-3327)\n\nA NULL pointer dereference flaw was found in the way the bgpd daemon\nprocessed malformed route Extended Communities attributes. A configured\nBGP peer could crash bgpd on a target system via a specially-crafted BGP\nmessage. (CVE-2010-1674)\n\nA stack-based buffer overflow flaw was found in the way the ospf6d daemon\nprocessed malformed Link State Update packets. An OSPF router could use\nthis flaw to crash ospf6d on an adjacent router. (CVE-2011-3323)\n\nA flaw was found in the way the ospf6d daemon processed malformed link\nstate advertisements. An OSPF neighbor could use this flaw to crash\nospf6d on a target system. (CVE-2011-3324)\n\nA flaw was found in the way the ospfd daemon processed malformed Hello\npackets. An OSPF neighbor could use this flaw to crash ospfd on a\ntarget system. (CVE-2011-3325)\n\nA flaw was found in the way the ospfd daemon processed malformed link state\nadvertisements. An OSPF router in the autonomous system could use this flaw\nto crash ospfd on a target system. (CVE-2011-3326)\n\nAn assertion failure was found in the way the ospfd daemon processed\ncertain Link State Update packets. An OSPF router could use this flaw to\ncause ospfd on an adjacent router to abort. (CVE-2012-0249)\n\nA buffer overflow flaw was found in the way the ospfd daemon processed\ncertain Link State Update packets. An OSPF router could use this flaw to\ncrash ospfd on an adjacent router. (CVE-2012-0250)\n\nRed Hat would like to thank CERT-FI for reporting CVE-2011-3327,\nCVE-2011-3323, CVE-2011-3324, CVE-2011-3325, and CVE-2011-3326; and the\nCERT/CC for reporting CVE-2012-0249 and CVE-2012-0250. CERT-FI acknowledges\nRiku Hietamäki, Tuomo Untinen and Jukka Taimisto of the Codenomicon CROSS\nproject as the original reporters of CVE-2011-3327, CVE-2011-3323,\nCVE-2011-3324, CVE-2011-3325, and CVE-2011-3326. The CERT/CC acknowledges\nMartin Winter at OpenSourceRouting.org as the original reporter of\nCVE-2012-0249 and CVE-2012-0250.\n\nUsers of quagga should upgrade to these updated packages, which contain\nbackported patches to correct these issues. After installing the updated\npackages, the bgpd, ospfd, and ospf6d daemons will be restarted\nautomatically.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2012:1258", url: "https://access.redhat.com/errata/RHSA-2012:1258", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "654603", url: "https://bugzilla.redhat.com/show_bug.cgi?id=654603", }, { category: "external", summary: "738393", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738393", }, { category: "external", summary: "738394", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738394", }, { category: "external", summary: "738396", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", }, { category: "external", summary: "738398", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738398", }, { category: "external", summary: "738400", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738400", }, { category: "external", summary: "802827", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802827", }, { category: "external", summary: "802829", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802829", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1258.json", }, ], title: "Red Hat Security Advisory: quagga security update", tracking: { current_release_date: "2024-11-22T05:38:15+00:00", generator: { date: "2024-11-22T05:38:15+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2012:1258", initial_release_date: "2012-09-12T19:56:00+00:00", revision_history: [ { date: "2012-09-12T19:56:00+00:00", number: "1", summary: "Initial version", }, { date: "2012-09-12T20:02:35+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T05:38:15+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product: { name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::client", }, }, }, { category: "product_name", name: "RHEL Desktop Workstation (v. 5 client)", product: { name: "RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::client_workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux (v. 5 server)", product: { name: "Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::server", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "quagga-contrib-0:0.98.6-7.el5_8.1.i386", product: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.i386", product_id: "quagga-contrib-0:0.98.6-7.el5_8.1.i386", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.98.6-7.el5_8.1?arch=i386", }, }, }, { category: "product_version", name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", product: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", product_id: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.98.6-7.el5_8.1?arch=i386", }, }, }, { category: "product_version", name: "quagga-devel-0:0.98.6-7.el5_8.1.i386", product: { name: "quagga-devel-0:0.98.6-7.el5_8.1.i386", product_id: "quagga-devel-0:0.98.6-7.el5_8.1.i386", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.98.6-7.el5_8.1?arch=i386", }, }, }, { category: "product_version", name: "quagga-0:0.98.6-7.el5_8.1.i386", product: { name: "quagga-0:0.98.6-7.el5_8.1.i386", product_id: "quagga-0:0.98.6-7.el5_8.1.i386", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.98.6-7.el5_8.1?arch=i386", }, }, }, ], category: "architecture", name: "i386", }, { branches: [ { category: "product_version", name: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", product: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", product_id: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.98.6-7.el5_8.1?arch=x86_64", }, }, }, { category: "product_version", name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", product: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", product_id: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.98.6-7.el5_8.1?arch=x86_64", }, }, }, { category: "product_version", name: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64", product: { name: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64", product_id: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.98.6-7.el5_8.1?arch=x86_64", }, }, }, { category: "product_version", name: "quagga-0:0.98.6-7.el5_8.1.x86_64", product: { name: "quagga-0:0.98.6-7.el5_8.1.x86_64", product_id: "quagga-0:0.98.6-7.el5_8.1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.98.6-7.el5_8.1?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "quagga-0:0.98.6-7.el5_8.1.src", product: { name: "quagga-0:0.98.6-7.el5_8.1.src", product_id: "quagga-0:0.98.6-7.el5_8.1.src", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.98.6-7.el5_8.1?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "quagga-devel-0:0.98.6-7.el5_8.1.s390", product: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390", product_id: "quagga-devel-0:0.98.6-7.el5_8.1.s390", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.98.6-7.el5_8.1?arch=s390", }, }, }, { category: "product_version", name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", product: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", product_id: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.98.6-7.el5_8.1?arch=s390", }, }, }, ], category: "architecture", name: "s390", }, { branches: [ { category: "product_version", name: "quagga-devel-0:0.98.6-7.el5_8.1.s390x", product: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390x", product_id: "quagga-devel-0:0.98.6-7.el5_8.1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.98.6-7.el5_8.1?arch=s390x", }, }, }, { category: "product_version", name: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x", product: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x", product_id: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.98.6-7.el5_8.1?arch=s390x", }, }, }, { category: "product_version", name: "quagga-0:0.98.6-7.el5_8.1.s390x", product: { name: "quagga-0:0.98.6-7.el5_8.1.s390x", product_id: "quagga-0:0.98.6-7.el5_8.1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.98.6-7.el5_8.1?arch=s390x", }, }, }, { category: "product_version", name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", product: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", product_id: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.98.6-7.el5_8.1?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "quagga-devel-0:0.98.6-7.el5_8.1.ia64", product: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ia64", product_id: "quagga-devel-0:0.98.6-7.el5_8.1.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.98.6-7.el5_8.1?arch=ia64", }, }, }, { category: "product_version", name: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64", product: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64", product_id: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.98.6-7.el5_8.1?arch=ia64", }, }, }, { category: "product_version", name: "quagga-0:0.98.6-7.el5_8.1.ia64", product: { name: "quagga-0:0.98.6-7.el5_8.1.ia64", product_id: "quagga-0:0.98.6-7.el5_8.1.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.98.6-7.el5_8.1?arch=ia64", }, }, }, { category: "product_version", name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", product: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", product_id: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.98.6-7.el5_8.1?arch=ia64", }, }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64", product: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64", product_id: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.98.6-7.el5_8.1?arch=ppc64", }, }, }, { category: "product_version", name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", product: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", product_id: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.98.6-7.el5_8.1?arch=ppc64", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc", product: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc", product_id: "quagga-devel-0:0.98.6-7.el5_8.1.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.98.6-7.el5_8.1?arch=ppc", }, }, }, { category: "product_version", name: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc", product: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc", product_id: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.98.6-7.el5_8.1?arch=ppc", }, }, }, { category: "product_version", name: "quagga-0:0.98.6-7.el5_8.1.ppc", product: { name: "quagga-0:0.98.6-7.el5_8.1.ppc", product_id: "quagga-0:0.98.6-7.el5_8.1.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.98.6-7.el5_8.1?arch=ppc", }, }, }, { category: "product_version", name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", product: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", product_id: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.98.6-7.el5_8.1?arch=ppc", }, }, }, ], category: "architecture", name: "ppc", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.src", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.s390", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.i386 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.ia64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.ppc as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.s390x as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.src as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.src", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.x86_64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.i386 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.i386 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ia64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.s390", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390x as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.src as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.src", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.s390", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Server-5.8.Z", }, ], }, vulnerabilities: [ { cve: "CVE-2010-1674", discovery_date: "2010-11-17T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "654603", }, ], notes: [ { category: "description", text: "The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed Extended Communities attribute.", title: "Vulnerability description", }, { category: "summary", text: "quagga: DoS (crash) by processing malformed extended community attribute in a route", title: "Vulnerability summary", }, { category: "other", text: "Vulnerable. This issue affects quagga packages in Red Hat Enterprise\nLinux 4 and 5. The Red Hat Security Response Team has rated this issue\nas having low security impact, a future update may address this flaw.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2010-1674", }, { category: "external", summary: "RHBZ#654603", url: "https://bugzilla.redhat.com/show_bug.cgi?id=654603", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2010-1674", url: "https://www.cve.org/CVERecord?id=CVE-2010-1674", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2010-1674", url: "https://nvd.nist.gov/vuln/detail/CVE-2010-1674", }, ], release_date: "2011-03-21T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 1.8, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:H/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "quagga: DoS (crash) by processing malformed extended community attribute in a route", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3323", cwe: { id: "CWE-121", name: "Stack-based Buffer Overflow", }, discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738393", }, ], notes: [ { category: "description", text: "The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (out-of-bounds memory access and daemon crash) via a Link State Update message with an invalid IPv6 prefix length.", title: "Vulnerability description", }, { category: "summary", text: "(ospf6d): Stack-based buffer overflow while decoding Link State Update packet with malformed Inter Area Prefix LSA", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3323", }, { category: "external", summary: "RHBZ#738393", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738393", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3323", url: "https://www.cve.org/CVERecord?id=CVE-2011-3323", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3323", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3323", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.4, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:A/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospf6d): Stack-based buffer overflow while decoding Link State Update packet with malformed Inter Area Prefix LSA", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3324", discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738394", }, ], notes: [ { category: "description", text: "The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via trailing zero values in the Link State Advertisement (LSA) header list of an IPv6 Database Description message.", title: "Vulnerability description", }, { category: "summary", text: "(ospf6d): Denial of service by decoding malformed Database Description packet headers", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3324", }, { category: "external", summary: "RHBZ#738394", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738394", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3324", url: "https://www.cve.org/CVERecord?id=CVE-2011-3324", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3324", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3324", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospf6d): Denial of service by decoding malformed Database Description packet headers", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3325", discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738396", }, ], notes: [ { category: "description", text: "ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Denial of service by decoding too short Hello packet or Hello packet with invalid OSPFv2 header type", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3325", }, { category: "external", summary: "RHBZ#738396", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3325", url: "https://www.cve.org/CVERecord?id=CVE-2011-3325", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3325", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3325", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Denial of service by decoding too short Hello packet or Hello packet with invalid OSPFv2 header type", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3326", discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738398", }, ], notes: [ { category: "description", text: "The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via an invalid Link State Advertisement (LSA) type in an IPv4 Link State Update message.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Denial of service by decoding Link State Update LSAs of unknown type", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3326", }, { category: "external", summary: "RHBZ#738398", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738398", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3326", url: "https://www.cve.org/CVERecord?id=CVE-2011-3326", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3326", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3326", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Denial of service by decoding Link State Update LSAs of unknown type", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3327", cwe: { id: "CWE-122", name: "Heap-based Buffer Overflow", }, discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738400", }, ], notes: [ { category: "description", text: "Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by sending a crafted BGP UPDATE message over IPv4.", title: "Vulnerability description", }, { category: "summary", text: "(bgpd): Heap-based buffer overflow by decoding BGP UPDATE message with unknown AS_PATH attributes", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3327", }, { category: "external", summary: "RHBZ#738400", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738400", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3327", url: "https://www.cve.org/CVERecord?id=CVE-2011-3327", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3327", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3327", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.4, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:A/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "(bgpd): Heap-based buffer overflow by decoding BGP UPDATE message with unknown AS_PATH attributes", }, { acknowledgments: [ { names: [ "CERT/CC", ], }, ], cve: "CVE-2012-0249", discovery_date: "2012-03-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "802827", }, ], notes: [ { category: "description", text: "Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Assertion failure due improper length check for a received LS-Update OSPF packet", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2012-0249", }, { category: "external", summary: "RHBZ#802827", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802827", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2012-0249", url: "https://www.cve.org/CVERecord?id=CVE-2012-0249", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2012-0249", url: "https://nvd.nist.gov/vuln/detail/CVE-2012-0249", }, ], release_date: "2012-03-28T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Assertion failure due improper length check for a received LS-Update OSPF packet", }, { acknowledgments: [ { names: [ "CERT/CC", ], }, ], cve: "CVE-2012-0250", discovery_date: "2012-03-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "802829", }, ], notes: [ { category: "description", text: "Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (daemon crash) via a Link State Update (aka LS Update) packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the value in the Length header field.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Crash by processing LS-Update OSPF packet due improper length check of the Network-LSA structures", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2012-0250", }, { category: "external", summary: "RHBZ#802829", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802829", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2012-0250", url: "https://www.cve.org/CVERecord?id=CVE-2012-0250", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2012-0250", url: "https://nvd.nist.gov/vuln/detail/CVE-2012-0250", }, ], release_date: "2012-03-28T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Crash by processing LS-Update OSPF packet due improper length check of the Network-LSA structures", }, ], }
rhsa-2012_1259
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Updated quagga packages that fix multiple security issues are now available\nfor Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.", title: "Topic", }, { category: "general", text: "Quagga is a TCP/IP based routing software suite. The Quagga bgpd daemon\nimplements the BGP (Border Gateway Protocol) routing protocol. The Quagga\nospfd and ospf6d daemons implement the OSPF (Open Shortest Path First)\nrouting protocol.\n\nA heap-based buffer overflow flaw was found in the way the bgpd daemon\nprocessed malformed Extended Communities path attributes. An attacker could\nsend a specially-crafted BGP message, causing bgpd on a target system to\ncrash or, possibly, execute arbitrary code with the privileges of the user\nrunning bgpd. The UPDATE message would have to arrive from an explicitly\nconfigured BGP peer, but could have originated elsewhere in the BGP\nnetwork. (CVE-2011-3327)\n\nA stack-based buffer overflow flaw was found in the way the ospf6d daemon\nprocessed malformed Link State Update packets. An OSPF router could use\nthis flaw to crash ospf6d on an adjacent router. (CVE-2011-3323)\n\nA flaw was found in the way the ospf6d daemon processed malformed link\nstate advertisements. An OSPF neighbor could use this flaw to crash\nospf6d on a target system. (CVE-2011-3324)\n\nA flaw was found in the way the ospfd daemon processed malformed Hello\npackets. An OSPF neighbor could use this flaw to crash ospfd on a\ntarget system. (CVE-2011-3325)\n\nA flaw was found in the way the ospfd daemon processed malformed link state\nadvertisements. An OSPF router in the autonomous system could use this flaw\nto crash ospfd on a target system. (CVE-2011-3326)\n\nAn assertion failure was found in the way the ospfd daemon processed\ncertain Link State Update packets. An OSPF router could use this flaw to\ncause ospfd on an adjacent router to abort. (CVE-2012-0249)\n\nA buffer overflow flaw was found in the way the ospfd daemon processed\ncertain Link State Update packets. An OSPF router could use this flaw to\ncrash ospfd on an adjacent router. (CVE-2012-0250)\n\nTwo flaws were found in the way the bgpd daemon processed certain BGP OPEN\nmessages. A configured BGP peer could cause bgpd on a target system to\nabort via a specially-crafted BGP OPEN message. (CVE-2012-0255,\nCVE-2012-1820)\n\nRed Hat would like to thank CERT-FI for reporting CVE-2011-3327,\nCVE-2011-3323, CVE-2011-3324, CVE-2011-3325, and CVE-2011-3326; and the\nCERT/CC for reporting CVE-2012-0249, CVE-2012-0250, CVE-2012-0255, and\nCVE-2012-1820. CERT-FI acknowledges Riku Hietamäki, Tuomo Untinen and Jukka\nTaimisto of the Codenomicon CROSS project as the original reporters of\nCVE-2011-3327, CVE-2011-3323, CVE-2011-3324, CVE-2011-3325, and\nCVE-2011-3326. The CERT/CC acknowledges Martin Winter at\nOpenSourceRouting.org as the original reporter of CVE-2012-0249,\nCVE-2012-0250, and CVE-2012-0255, and Denis Ovsienko as the original\nreporter of CVE-2012-1820.\n\nUsers of quagga should upgrade to these updated packages, which contain\nbackported patches to correct these issues. After installing the updated\npackages, the bgpd, ospfd, and ospf6d daemons will be restarted\nautomatically.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2012:1259", url: "https://access.redhat.com/errata/RHSA-2012:1259", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "738393", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738393", }, { category: "external", summary: "738394", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738394", }, { category: "external", summary: "738396", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", }, { category: "external", summary: "738398", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738398", }, { category: "external", summary: "738400", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738400", }, { category: "external", summary: "802781", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802781", }, { category: "external", summary: "802827", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802827", }, { category: "external", summary: "802829", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802829", }, { category: "external", summary: "817580", url: "https://bugzilla.redhat.com/show_bug.cgi?id=817580", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1259.json", }, ], title: "Red Hat Security Advisory: quagga security update", tracking: { current_release_date: "2024-11-22T05:38:20+00:00", generator: { date: "2024-11-22T05:38:20+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2012:1259", initial_release_date: "2012-09-12T19:59:00+00:00", revision_history: [ { date: "2012-09-12T19:59:00+00:00", number: "1", summary: "Initial version", }, { date: "2012-09-12T20:00:43+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T05:38:20+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 6)", product: { name: "Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 6)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Optional (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", product: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", product_id: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.99.15-7.el6_3.2?arch=ppc64", }, }, }, { category: "product_version", name: "quagga-0:0.99.15-7.el6_3.2.ppc64", product: { name: "quagga-0:0.99.15-7.el6_3.2.ppc64", product_id: "quagga-0:0.99.15-7.el6_3.2.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.99.15-7.el6_3.2?arch=ppc64", }, }, }, { category: "product_version", name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64", product: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64", product_id: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.99.15-7.el6_3.2?arch=ppc64", }, }, }, { category: "product_version", name: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", product: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", product_id: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.99.15-7.el6_3.2?arch=ppc64", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", product: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", product_id: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.99.15-7.el6_3.2?arch=i686", }, }, }, { category: "product_version", name: "quagga-0:0.99.15-7.el6_3.2.i686", product: { name: "quagga-0:0.99.15-7.el6_3.2.i686", product_id: "quagga-0:0.99.15-7.el6_3.2.i686", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.99.15-7.el6_3.2?arch=i686", }, }, }, { category: "product_version", name: "quagga-devel-0:0.99.15-7.el6_3.2.i686", product: { name: "quagga-devel-0:0.99.15-7.el6_3.2.i686", product_id: "quagga-devel-0:0.99.15-7.el6_3.2.i686", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.99.15-7.el6_3.2?arch=i686", }, }, }, { category: "product_version", name: "quagga-contrib-0:0.99.15-7.el6_3.2.i686", product: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.i686", product_id: "quagga-contrib-0:0.99.15-7.el6_3.2.i686", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.99.15-7.el6_3.2?arch=i686", }, }, }, ], category: "architecture", name: "i686", }, { branches: [ { category: "product_version", name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", product: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", product_id: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.99.15-7.el6_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "quagga-0:0.99.15-7.el6_3.2.x86_64", product: { name: "quagga-0:0.99.15-7.el6_3.2.x86_64", product_id: "quagga-0:0.99.15-7.el6_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.99.15-7.el6_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64", product: { name: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64", product_id: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.99.15-7.el6_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", product: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", product_id: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.99.15-7.el6_3.2?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", product: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", product_id: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.99.15-7.el6_3.2?arch=s390x", }, }, }, { category: "product_version", name: "quagga-0:0.99.15-7.el6_3.2.s390x", product: { name: "quagga-0:0.99.15-7.el6_3.2.s390x", product_id: "quagga-0:0.99.15-7.el6_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.99.15-7.el6_3.2?arch=s390x", }, }, }, { category: "product_version", name: "quagga-devel-0:0.99.15-7.el6_3.2.s390x", product: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390x", product_id: "quagga-devel-0:0.99.15-7.el6_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.99.15-7.el6_3.2?arch=s390x", }, }, }, { category: "product_version", name: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x", product: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x", product_id: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.99.15-7.el6_3.2?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "quagga-0:0.99.15-7.el6_3.2.src", product: { name: "quagga-0:0.99.15-7.el6_3.2.src", product_id: "quagga-0:0.99.15-7.el6_3.2.src", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.99.15-7.el6_3.2?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", product: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", product_id: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.99.15-7.el6_3.2?arch=s390", }, }, }, { category: "product_version", name: "quagga-devel-0:0.99.15-7.el6_3.2.s390", product: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390", product_id: "quagga-devel-0:0.99.15-7.el6_3.2.s390", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.99.15-7.el6_3.2?arch=s390", }, }, }, ], category: "architecture", name: "s390", }, { branches: [ { category: "product_version", name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", product: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", product_id: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.99.15-7.el6_3.2?arch=ppc", }, }, }, { category: "product_version", name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc", product: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc", product_id: "quagga-devel-0:0.99.15-7.el6_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.99.15-7.el6_3.2?arch=ppc", }, }, }, ], category: "architecture", name: "ppc", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.src as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.src", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.src", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Server-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.src", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.src", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.i686", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.ppc64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.s390x", relates_to_product_reference: "6Workstation-optional-6.3.z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", }, product_reference: "quagga-devel-0:0.99.15-7.el6_3.2.x86_64", relates_to_product_reference: "6Workstation-optional-6.3.z", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3323", cwe: { id: "CWE-121", name: "Stack-based Buffer Overflow", }, discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738393", }, ], notes: [ { category: "description", text: "The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (out-of-bounds memory access and daemon crash) via a Link State Update message with an invalid IPv6 prefix length.", title: "Vulnerability description", }, { category: "summary", text: "(ospf6d): Stack-based buffer overflow while decoding Link State Update packet with malformed Inter Area Prefix LSA", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3323", }, { category: "external", summary: "RHBZ#738393", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738393", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3323", url: "https://www.cve.org/CVERecord?id=CVE-2011-3323", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3323", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3323", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.4, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:A/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospf6d): Stack-based buffer overflow while decoding Link State Update packet with malformed Inter Area Prefix LSA", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3324", discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738394", }, ], notes: [ { category: "description", text: "The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via trailing zero values in the Link State Advertisement (LSA) header list of an IPv6 Database Description message.", title: "Vulnerability description", }, { category: "summary", text: "(ospf6d): Denial of service by decoding malformed Database Description packet headers", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3324", }, { category: "external", summary: "RHBZ#738394", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738394", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3324", url: "https://www.cve.org/CVERecord?id=CVE-2011-3324", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3324", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3324", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospf6d): Denial of service by decoding malformed Database Description packet headers", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3325", discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738396", }, ], notes: [ { category: "description", text: "ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Denial of service by decoding too short Hello packet or Hello packet with invalid OSPFv2 header type", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3325", }, { category: "external", summary: "RHBZ#738396", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3325", url: "https://www.cve.org/CVERecord?id=CVE-2011-3325", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3325", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3325", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Denial of service by decoding too short Hello packet or Hello packet with invalid OSPFv2 header type", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3326", discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738398", }, ], notes: [ { category: "description", text: "The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via an invalid Link State Advertisement (LSA) type in an IPv4 Link State Update message.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Denial of service by decoding Link State Update LSAs of unknown type", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3326", }, { category: "external", summary: "RHBZ#738398", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738398", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3326", url: "https://www.cve.org/CVERecord?id=CVE-2011-3326", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3326", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3326", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Denial of service by decoding Link State Update LSAs of unknown type", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3327", cwe: { id: "CWE-122", name: "Heap-based Buffer Overflow", }, discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738400", }, ], notes: [ { category: "description", text: "Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by sending a crafted BGP UPDATE message over IPv4.", title: "Vulnerability description", }, { category: "summary", text: "(bgpd): Heap-based buffer overflow by decoding BGP UPDATE message with unknown AS_PATH attributes", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3327", }, { category: "external", summary: "RHBZ#738400", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738400", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3327", url: "https://www.cve.org/CVERecord?id=CVE-2011-3327", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3327", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3327", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.4, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:A/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "(bgpd): Heap-based buffer overflow by decoding BGP UPDATE message with unknown AS_PATH attributes", }, { acknowledgments: [ { names: [ "CERT/CC", ], }, ], cve: "CVE-2012-0249", discovery_date: "2012-03-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "802827", }, ], notes: [ { category: "description", text: "Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Assertion failure due improper length check for a received LS-Update OSPF packet", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2012-0249", }, { category: "external", summary: "RHBZ#802827", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802827", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2012-0249", url: "https://www.cve.org/CVERecord?id=CVE-2012-0249", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2012-0249", url: "https://nvd.nist.gov/vuln/detail/CVE-2012-0249", }, ], release_date: "2012-03-28T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Assertion failure due improper length check for a received LS-Update OSPF packet", }, { acknowledgments: [ { names: [ "CERT/CC", ], }, ], cve: "CVE-2012-0250", discovery_date: "2012-03-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "802829", }, ], notes: [ { category: "description", text: "Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (daemon crash) via a Link State Update (aka LS Update) packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the value in the Length header field.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Crash by processing LS-Update OSPF packet due improper length check of the Network-LSA structures", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2012-0250", }, { category: "external", summary: "RHBZ#802829", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802829", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2012-0250", url: "https://www.cve.org/CVERecord?id=CVE-2012-0250", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2012-0250", url: "https://nvd.nist.gov/vuln/detail/CVE-2012-0250", }, ], release_date: "2012-03-28T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Crash by processing LS-Update OSPF packet due improper length check of the Network-LSA structures", }, { acknowledgments: [ { names: [ "CERT/CC", ], }, ], cve: "CVE-2012-0255", discovery_date: "2012-03-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "802781", }, ], notes: [ { category: "description", text: "The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a message associated with a malformed Four-octet AS Number Capability (aka AS4 capability).", title: "Vulnerability description", }, { category: "summary", text: "(bgpd): Assertion failure by processing malformed AS4 capability in BGP OPEN message", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2012-0255", }, { category: "external", summary: "RHBZ#802781", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802781", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2012-0255", url: "https://www.cve.org/CVERecord?id=CVE-2012-0255", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2012-0255", url: "https://nvd.nist.gov/vuln/detail/CVE-2012-0255", }, ], release_date: "2012-03-28T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(bgpd): Assertion failure by processing malformed AS4 capability in BGP OPEN message", }, { acknowledgments: [ { names: [ "CERT/CC", ], }, ], cve: "CVE-2012-1820", discovery_date: "2012-04-25T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "817580", }, ], notes: [ { category: "description", text: "The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering (ORF) capability TLV in an OPEN message.", title: "Vulnerability description", }, { category: "summary", text: "(bgpd): Assertion failure by processing BGP OPEN message with malformed ORF capability TLV (VU#962587)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2012-1820", }, { category: "external", summary: "RHBZ#817580", url: "https://bugzilla.redhat.com/show_bug.cgi?id=817580", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2012-1820", url: "https://www.cve.org/CVERecord?id=CVE-2012-1820", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2012-1820", url: "https://nvd.nist.gov/vuln/detail/CVE-2012-1820", }, ], release_date: "2012-06-03T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:59:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1259", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Server-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Server-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.src", "6Workstation-optional-6.3.z:quagga-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-contrib-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-debuginfo-0:0.99.15-7.el6_3.2.x86_64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.i686", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.ppc64", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.s390x", "6Workstation-optional-6.3.z:quagga-devel-0:0.99.15-7.el6_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(bgpd): Assertion failure by processing BGP OPEN message with malformed ORF capability TLV (VU#962587)", }, ], }
RHSA-2012:1258
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Updated quagga packages that fix multiple security issues are now available\nfor Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.", title: "Topic", }, { category: "general", text: "Quagga is a TCP/IP based routing software suite. The Quagga bgpd daemon\nimplements the BGP (Border Gateway Protocol) routing protocol. The Quagga\nospfd and ospf6d daemons implement the OSPF (Open Shortest Path First)\nrouting protocol.\n\nA heap-based buffer overflow flaw was found in the way the bgpd daemon\nprocessed malformed Extended Communities path attributes. An attacker could\nsend a specially-crafted BGP message, causing bgpd on a target system to\ncrash or, possibly, execute arbitrary code with the privileges of the user\nrunning bgpd. The UPDATE message would have to arrive from an explicitly\nconfigured BGP peer, but could have originated elsewhere in the BGP\nnetwork. (CVE-2011-3327)\n\nA NULL pointer dereference flaw was found in the way the bgpd daemon\nprocessed malformed route Extended Communities attributes. A configured\nBGP peer could crash bgpd on a target system via a specially-crafted BGP\nmessage. (CVE-2010-1674)\n\nA stack-based buffer overflow flaw was found in the way the ospf6d daemon\nprocessed malformed Link State Update packets. An OSPF router could use\nthis flaw to crash ospf6d on an adjacent router. (CVE-2011-3323)\n\nA flaw was found in the way the ospf6d daemon processed malformed link\nstate advertisements. An OSPF neighbor could use this flaw to crash\nospf6d on a target system. (CVE-2011-3324)\n\nA flaw was found in the way the ospfd daemon processed malformed Hello\npackets. An OSPF neighbor could use this flaw to crash ospfd on a\ntarget system. (CVE-2011-3325)\n\nA flaw was found in the way the ospfd daemon processed malformed link state\nadvertisements. An OSPF router in the autonomous system could use this flaw\nto crash ospfd on a target system. (CVE-2011-3326)\n\nAn assertion failure was found in the way the ospfd daemon processed\ncertain Link State Update packets. An OSPF router could use this flaw to\ncause ospfd on an adjacent router to abort. (CVE-2012-0249)\n\nA buffer overflow flaw was found in the way the ospfd daemon processed\ncertain Link State Update packets. An OSPF router could use this flaw to\ncrash ospfd on an adjacent router. (CVE-2012-0250)\n\nRed Hat would like to thank CERT-FI for reporting CVE-2011-3327,\nCVE-2011-3323, CVE-2011-3324, CVE-2011-3325, and CVE-2011-3326; and the\nCERT/CC for reporting CVE-2012-0249 and CVE-2012-0250. CERT-FI acknowledges\nRiku Hietamäki, Tuomo Untinen and Jukka Taimisto of the Codenomicon CROSS\nproject as the original reporters of CVE-2011-3327, CVE-2011-3323,\nCVE-2011-3324, CVE-2011-3325, and CVE-2011-3326. The CERT/CC acknowledges\nMartin Winter at OpenSourceRouting.org as the original reporter of\nCVE-2012-0249 and CVE-2012-0250.\n\nUsers of quagga should upgrade to these updated packages, which contain\nbackported patches to correct these issues. After installing the updated\npackages, the bgpd, ospfd, and ospf6d daemons will be restarted\nautomatically.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2012:1258", url: "https://access.redhat.com/errata/RHSA-2012:1258", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "654603", url: "https://bugzilla.redhat.com/show_bug.cgi?id=654603", }, { category: "external", summary: "738393", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738393", }, { category: "external", summary: "738394", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738394", }, { category: "external", summary: "738396", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", }, { category: "external", summary: "738398", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738398", }, { category: "external", summary: "738400", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738400", }, { category: "external", summary: "802827", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802827", }, { category: "external", summary: "802829", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802829", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1258.json", }, ], title: "Red Hat Security Advisory: quagga security update", tracking: { current_release_date: "2024-11-22T05:38:15+00:00", generator: { date: "2024-11-22T05:38:15+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2012:1258", initial_release_date: "2012-09-12T19:56:00+00:00", revision_history: [ { date: "2012-09-12T19:56:00+00:00", number: "1", summary: "Initial version", }, { date: "2012-09-12T20:02:35+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T05:38:15+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product: { name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::client", }, }, }, { category: "product_name", name: "RHEL Desktop Workstation (v. 5 client)", product: { name: "RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::client_workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux (v. 5 server)", product: { name: "Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::server", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "quagga-contrib-0:0.98.6-7.el5_8.1.i386", product: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.i386", product_id: "quagga-contrib-0:0.98.6-7.el5_8.1.i386", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.98.6-7.el5_8.1?arch=i386", }, }, }, { category: "product_version", name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", product: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", product_id: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.98.6-7.el5_8.1?arch=i386", }, }, }, { category: "product_version", name: "quagga-devel-0:0.98.6-7.el5_8.1.i386", product: { name: "quagga-devel-0:0.98.6-7.el5_8.1.i386", product_id: "quagga-devel-0:0.98.6-7.el5_8.1.i386", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.98.6-7.el5_8.1?arch=i386", }, }, }, { category: "product_version", name: "quagga-0:0.98.6-7.el5_8.1.i386", product: { name: "quagga-0:0.98.6-7.el5_8.1.i386", product_id: "quagga-0:0.98.6-7.el5_8.1.i386", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.98.6-7.el5_8.1?arch=i386", }, }, }, ], category: "architecture", name: "i386", }, { branches: [ { category: "product_version", name: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", product: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", product_id: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.98.6-7.el5_8.1?arch=x86_64", }, }, }, { category: "product_version", name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", product: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", product_id: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.98.6-7.el5_8.1?arch=x86_64", }, }, }, { category: "product_version", name: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64", product: { name: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64", product_id: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.98.6-7.el5_8.1?arch=x86_64", }, }, }, { category: "product_version", name: "quagga-0:0.98.6-7.el5_8.1.x86_64", product: { name: "quagga-0:0.98.6-7.el5_8.1.x86_64", product_id: "quagga-0:0.98.6-7.el5_8.1.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.98.6-7.el5_8.1?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "quagga-0:0.98.6-7.el5_8.1.src", product: { name: "quagga-0:0.98.6-7.el5_8.1.src", product_id: "quagga-0:0.98.6-7.el5_8.1.src", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.98.6-7.el5_8.1?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "quagga-devel-0:0.98.6-7.el5_8.1.s390", product: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390", product_id: "quagga-devel-0:0.98.6-7.el5_8.1.s390", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.98.6-7.el5_8.1?arch=s390", }, }, }, { category: "product_version", name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", product: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", product_id: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.98.6-7.el5_8.1?arch=s390", }, }, }, ], category: "architecture", name: "s390", }, { branches: [ { category: "product_version", name: "quagga-devel-0:0.98.6-7.el5_8.1.s390x", product: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390x", product_id: "quagga-devel-0:0.98.6-7.el5_8.1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.98.6-7.el5_8.1?arch=s390x", }, }, }, { category: "product_version", name: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x", product: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x", product_id: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.98.6-7.el5_8.1?arch=s390x", }, }, }, { category: "product_version", name: "quagga-0:0.98.6-7.el5_8.1.s390x", product: { name: "quagga-0:0.98.6-7.el5_8.1.s390x", product_id: "quagga-0:0.98.6-7.el5_8.1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.98.6-7.el5_8.1?arch=s390x", }, }, }, { category: "product_version", name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", product: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", product_id: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.98.6-7.el5_8.1?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "quagga-devel-0:0.98.6-7.el5_8.1.ia64", product: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ia64", product_id: "quagga-devel-0:0.98.6-7.el5_8.1.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.98.6-7.el5_8.1?arch=ia64", }, }, }, { category: "product_version", name: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64", product: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64", product_id: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.98.6-7.el5_8.1?arch=ia64", }, }, }, { category: "product_version", name: "quagga-0:0.98.6-7.el5_8.1.ia64", product: { name: "quagga-0:0.98.6-7.el5_8.1.ia64", product_id: "quagga-0:0.98.6-7.el5_8.1.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.98.6-7.el5_8.1?arch=ia64", }, }, }, { category: "product_version", name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", product: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", product_id: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.98.6-7.el5_8.1?arch=ia64", }, }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64", product: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64", product_id: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.98.6-7.el5_8.1?arch=ppc64", }, }, }, { category: "product_version", name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", product: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", product_id: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.98.6-7.el5_8.1?arch=ppc64", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc", product: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc", product_id: "quagga-devel-0:0.98.6-7.el5_8.1.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-devel@0.98.6-7.el5_8.1?arch=ppc", }, }, }, { category: "product_version", name: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc", product: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc", product_id: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-contrib@0.98.6-7.el5_8.1?arch=ppc", }, }, }, { category: "product_version", name: "quagga-0:0.98.6-7.el5_8.1.ppc", product: { name: "quagga-0:0.98.6-7.el5_8.1.ppc", product_id: "quagga-0:0.98.6-7.el5_8.1.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/quagga@0.98.6-7.el5_8.1?arch=ppc", }, }, }, { category: "product_version", name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", product: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", product_id: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/quagga-debuginfo@0.98.6-7.el5_8.1?arch=ppc", }, }, }, ], category: "architecture", name: "ppc", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.src", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.s390", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.i386 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.ia64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.ppc as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.s390x as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.src as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.src", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.x86_64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.i386 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.i386 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ia64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.s390", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390x as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64 as a component of RHEL Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Client-Workstation-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.src as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.src", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.i386", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ia64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ppc", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.ppc64", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.s390", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.s390x", relates_to_product_reference: "5Server-5.8.Z", }, { category: "default_component_of", full_product_name: { name: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", }, product_reference: "quagga-devel-0:0.98.6-7.el5_8.1.x86_64", relates_to_product_reference: "5Server-5.8.Z", }, ], }, vulnerabilities: [ { cve: "CVE-2010-1674", discovery_date: "2010-11-17T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "654603", }, ], notes: [ { category: "description", text: "The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed Extended Communities attribute.", title: "Vulnerability description", }, { category: "summary", text: "quagga: DoS (crash) by processing malformed extended community attribute in a route", title: "Vulnerability summary", }, { category: "other", text: "Vulnerable. This issue affects quagga packages in Red Hat Enterprise\nLinux 4 and 5. The Red Hat Security Response Team has rated this issue\nas having low security impact, a future update may address this flaw.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2010-1674", }, { category: "external", summary: "RHBZ#654603", url: "https://bugzilla.redhat.com/show_bug.cgi?id=654603", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2010-1674", url: "https://www.cve.org/CVERecord?id=CVE-2010-1674", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2010-1674", url: "https://nvd.nist.gov/vuln/detail/CVE-2010-1674", }, ], release_date: "2011-03-21T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "HIGH", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 1.8, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:H/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "quagga: DoS (crash) by processing malformed extended community attribute in a route", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3323", cwe: { id: "CWE-121", name: "Stack-based Buffer Overflow", }, discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738393", }, ], notes: [ { category: "description", text: "The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (out-of-bounds memory access and daemon crash) via a Link State Update message with an invalid IPv6 prefix length.", title: "Vulnerability description", }, { category: "summary", text: "(ospf6d): Stack-based buffer overflow while decoding Link State Update packet with malformed Inter Area Prefix LSA", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3323", }, { category: "external", summary: "RHBZ#738393", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738393", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3323", url: "https://www.cve.org/CVERecord?id=CVE-2011-3323", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3323", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3323", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.4, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:A/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospf6d): Stack-based buffer overflow while decoding Link State Update packet with malformed Inter Area Prefix LSA", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3324", discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738394", }, ], notes: [ { category: "description", text: "The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via trailing zero values in the Link State Advertisement (LSA) header list of an IPv6 Database Description message.", title: "Vulnerability description", }, { category: "summary", text: "(ospf6d): Denial of service by decoding malformed Database Description packet headers", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3324", }, { category: "external", summary: "RHBZ#738394", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738394", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3324", url: "https://www.cve.org/CVERecord?id=CVE-2011-3324", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3324", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3324", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospf6d): Denial of service by decoding malformed Database Description packet headers", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3325", discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738396", }, ], notes: [ { category: "description", text: "ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Denial of service by decoding too short Hello packet or Hello packet with invalid OSPFv2 header type", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3325", }, { category: "external", summary: "RHBZ#738396", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3325", url: "https://www.cve.org/CVERecord?id=CVE-2011-3325", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3325", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3325", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Denial of service by decoding too short Hello packet or Hello packet with invalid OSPFv2 header type", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3326", discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738398", }, ], notes: [ { category: "description", text: "The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via an invalid Link State Advertisement (LSA) type in an IPv4 Link State Update message.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Denial of service by decoding Link State Update LSAs of unknown type", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3326", }, { category: "external", summary: "RHBZ#738398", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738398", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3326", url: "https://www.cve.org/CVERecord?id=CVE-2011-3326", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3326", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3326", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Denial of service by decoding Link State Update LSAs of unknown type", }, { acknowledgments: [ { names: [ "CERT-FI", ], }, ], cve: "CVE-2011-3327", cwe: { id: "CWE-122", name: "Heap-based Buffer Overflow", }, discovery_date: "2011-09-14T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "738400", }, ], notes: [ { category: "description", text: "Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by sending a crafted BGP UPDATE message over IPv4.", title: "Vulnerability description", }, { category: "summary", text: "(bgpd): Heap-based buffer overflow by decoding BGP UPDATE message with unknown AS_PATH attributes", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2011-3327", }, { category: "external", summary: "RHBZ#738400", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738400", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2011-3327", url: "https://www.cve.org/CVERecord?id=CVE-2011-3327", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2011-3327", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3327", }, ], release_date: "2011-09-26T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5.4, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:A/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "(bgpd): Heap-based buffer overflow by decoding BGP UPDATE message with unknown AS_PATH attributes", }, { acknowledgments: [ { names: [ "CERT/CC", ], }, ], cve: "CVE-2012-0249", discovery_date: "2012-03-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "802827", }, ], notes: [ { category: "description", text: "Buffer overflow in the ospf_ls_upd_list_lsa function in ospf_packet.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a Link State Update (aka LS Update) packet that is smaller than the length specified in its header.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Assertion failure due improper length check for a received LS-Update OSPF packet", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2012-0249", }, { category: "external", summary: "RHBZ#802827", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802827", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2012-0249", url: "https://www.cve.org/CVERecord?id=CVE-2012-0249", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2012-0249", url: "https://nvd.nist.gov/vuln/detail/CVE-2012-0249", }, ], release_date: "2012-03-28T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Assertion failure due improper length check for a received LS-Update OSPF packet", }, { acknowledgments: [ { names: [ "CERT/CC", ], }, ], cve: "CVE-2012-0250", discovery_date: "2012-03-13T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "802829", }, ], notes: [ { category: "description", text: "Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (daemon crash) via a Link State Update (aka LS Update) packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the value in the Length header field.", title: "Vulnerability description", }, { category: "summary", text: "(ospfd): Crash by processing LS-Update OSPF packet due improper length check of the Network-LSA structures", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2012-0250", }, { category: "external", summary: "RHBZ#802829", url: "https://bugzilla.redhat.com/show_bug.cgi?id=802829", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2012-0250", url: "https://www.cve.org/CVERecord?id=CVE-2012-0250", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2012-0250", url: "https://nvd.nist.gov/vuln/detail/CVE-2012-0250", }, ], release_date: "2012-03-28T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2012-09-12T19:56:00+00:00", details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", product_ids: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2012:1258", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 2.9, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:A/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Client-Workstation-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Client-Workstation-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.src", "5Server-5.8.Z:quagga-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-contrib-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-debuginfo-0:0.98.6-7.el5_8.1.x86_64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.i386", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ia64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.ppc64", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.s390x", "5Server-5.8.Z:quagga-devel-0:0.98.6-7.el5_8.1.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "(ospfd): Crash by processing LS-Update OSPF packet due improper length check of the Network-LSA structures", }, ], }
ghsa-68p8-wq54-pfrf
Vulnerability from github
ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet.
{ affected: [], aliases: [ "CVE-2011-3325", ], database_specific: { cwe_ids: [], github_reviewed: false, github_reviewed_at: null, nvd_published_at: "2011-10-10T10:55:00Z", severity: "MODERATE", }, details: "ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet.", id: "GHSA-68p8-wq54-pfrf", modified: "2022-05-14T03:53:31Z", published: "2022-05-14T03:53:31Z", references: [ { type: "ADVISORY", url: "https://nvd.nist.gov/vuln/detail/CVE-2011-3325", }, { type: "WEB", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", }, { type: "WEB", url: "https://www.cert.fi/en/reports/2011/vulnerability539178.html", }, { type: "WEB", url: "http://code.quagga.net/?p=quagga.git;a=commit;h=61ab0301606053192f45c188bc48afc837518770", }, { type: "WEB", url: "http://code.quagga.net/?p=quagga.git;a=commit;h=717750433839762d23a5f8d88fe0b4d57c8d490a", }, { type: "WEB", url: "http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00027.html", }, { type: "WEB", url: "http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00007.html", }, { type: "WEB", url: "http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00010.html", }, { type: "WEB", url: "http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html", }, { type: "WEB", url: "http://rhn.redhat.com/errata/RHSA-2012-1258.html", }, { type: "WEB", url: "http://rhn.redhat.com/errata/RHSA-2012-1259.html", }, { type: "WEB", url: "http://secunia.com/advisories/46139", }, { type: "WEB", url: "http://secunia.com/advisories/46274", }, { type: "WEB", url: "http://secunia.com/advisories/48106", }, { type: "WEB", url: "http://security.gentoo.org/glsa/glsa-201202-02.xml", }, { type: "WEB", url: "http://www.debian.org/security/2011/dsa-2316", }, { type: "WEB", url: "http://www.kb.cert.org/vuls/id/668534", }, { type: "WEB", url: "http://www.quagga.net/download/quagga-0.99.19.changelog.txt", }, ], schema_version: "1.4.0", severity: [], }
gsd-2011-3325
Vulnerability from gsd
{ GSD: { alias: "CVE-2011-3325", description: "ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet.", id: "GSD-2011-3325", references: [ "https://www.suse.com/security/cve/CVE-2011-3325.html", "https://www.debian.org/security/2011/dsa-2316", "https://access.redhat.com/errata/RHSA-2012:1259", "https://access.redhat.com/errata/RHSA-2012:1258", "https://linux.oracle.com/cve/CVE-2011-3325.html", ], }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { aliases: [ "CVE-2011-3325", ], details: "ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet.", id: "GSD-2011-3325", modified: "2023-12-13T01:19:10.117688Z", schema_version: "1.4.0", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "cert@cert.org", ID: "CVE-2011-3325", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "http://www.quagga.net/download/quagga-0.99.19.changelog.txt", refsource: "CONFIRM", url: "http://www.quagga.net/download/quagga-0.99.19.changelog.txt", }, { name: "http://code.quagga.net/?p=quagga.git;a=commit;h=61ab0301606053192f45c188bc48afc837518770", refsource: "CONFIRM", url: "http://code.quagga.net/?p=quagga.git;a=commit;h=61ab0301606053192f45c188bc48afc837518770", }, { name: "VU#668534", refsource: "CERT-VN", url: "http://www.kb.cert.org/vuls/id/668534", }, { name: "DSA-2316", refsource: "DEBIAN", url: "http://www.debian.org/security/2011/dsa-2316", }, { name: "RHSA-2012:1259", refsource: "REDHAT", url: "http://rhn.redhat.com/errata/RHSA-2012-1259.html", }, { name: "http://code.quagga.net/?p=quagga.git;a=commit;h=717750433839762d23a5f8d88fe0b4d57c8d490a", refsource: "CONFIRM", url: "http://code.quagga.net/?p=quagga.git;a=commit;h=717750433839762d23a5f8d88fe0b4d57c8d490a", }, { name: "https://www.cert.fi/en/reports/2011/vulnerability539178.html", refsource: "MISC", url: "https://www.cert.fi/en/reports/2011/vulnerability539178.html", }, { name: "46139", refsource: "SECUNIA", url: "http://secunia.com/advisories/46139", }, { name: "SUSE-SU-2011:1075", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00027.html", }, { name: "openSUSE-SU-2011:1155", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00007.html", }, { name: "GLSA-201202-02", refsource: "GENTOO", url: "http://security.gentoo.org/glsa/glsa-201202-02.xml", }, { name: "RHSA-2012:1258", refsource: "REDHAT", url: "http://rhn.redhat.com/errata/RHSA-2012-1258.html", }, { name: "SUSE-SU-2011:1316", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html", }, { name: "46274", refsource: "SECUNIA", url: "http://secunia.com/advisories/46274", }, { name: "48106", refsource: "SECUNIA", url: "http://secunia.com/advisories/48106", }, { name: "SUSE-SU-2011:1171", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00010.html", }, { name: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", refsource: "CONFIRM", url: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", }, ], }, }, "nvd.nist.gov": { configurations: { CVE_data_version: "4.0", nodes: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.99.7:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.96.5:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.96.2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.95:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.99.14:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.98.6:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.98.4:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.96.4:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.99.9:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.99.16:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.99.3:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.96.3:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.99.12:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.99.4:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.96:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.97.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.99.5:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.99.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.99.2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.99.15:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.99.6:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.98.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.98.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.97.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.97.2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.96.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.97.5:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:*:*:*:*:*:*:*:*", cpe_name: [], versionEndIncluding: "0.99.18", vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.99.17:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.99.11:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.99.8:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.99.13:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.98.5:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.99.10:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.98.2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.98.3:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.97.3:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:quagga:quagga:0.97.4:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, ], }, cve: { CVE_data_meta: { ASSIGNER: "cert@cert.org", ID: "CVE-2011-3325", }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "en", value: "ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "en", value: "CWE-399", }, ], }, ], }, references: { reference_data: [ { name: "http://www.quagga.net/download/quagga-0.99.19.changelog.txt", refsource: "CONFIRM", tags: [], url: "http://www.quagga.net/download/quagga-0.99.19.changelog.txt", }, { name: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", refsource: "CONFIRM", tags: [ "Patch", ], url: "https://bugzilla.redhat.com/show_bug.cgi?id=738396", }, { name: "DSA-2316", refsource: "DEBIAN", tags: [], url: "http://www.debian.org/security/2011/dsa-2316", }, { name: "http://code.quagga.net/?p=quagga.git;a=commit;h=717750433839762d23a5f8d88fe0b4d57c8d490a", refsource: "CONFIRM", tags: [ "Patch", ], url: "http://code.quagga.net/?p=quagga.git;a=commit;h=717750433839762d23a5f8d88fe0b4d57c8d490a", }, { name: "46139", refsource: "SECUNIA", tags: [ "Vendor Advisory", ], url: "http://secunia.com/advisories/46139", }, { name: "VU#668534", refsource: "CERT-VN", tags: [ "US Government Resource", ], url: "http://www.kb.cert.org/vuls/id/668534", }, { name: "https://www.cert.fi/en/reports/2011/vulnerability539178.html", refsource: "MISC", tags: [], url: "https://www.cert.fi/en/reports/2011/vulnerability539178.html", }, { name: "http://code.quagga.net/?p=quagga.git;a=commit;h=61ab0301606053192f45c188bc48afc837518770", refsource: "CONFIRM", tags: [ "Patch", ], url: "http://code.quagga.net/?p=quagga.git;a=commit;h=61ab0301606053192f45c188bc48afc837518770", }, { name: "46274", refsource: "SECUNIA", tags: [], url: "http://secunia.com/advisories/46274", }, { name: "openSUSE-SU-2011:1155", refsource: "SUSE", tags: [], url: "http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00007.html", }, { name: "SUSE-SU-2011:1075", refsource: "SUSE", tags: [], url: "http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00027.html", }, { name: "SUSE-SU-2011:1171", refsource: "SUSE", tags: [], url: "http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00010.html", }, { name: "SUSE-SU-2011:1316", refsource: "SUSE", tags: [], url: "http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html", }, { name: "RHSA-2012:1258", refsource: "REDHAT", tags: [], url: "http://rhn.redhat.com/errata/RHSA-2012-1258.html", }, { name: "RHSA-2012:1259", refsource: "REDHAT", tags: [], url: "http://rhn.redhat.com/errata/RHSA-2012-1259.html", }, { name: "GLSA-201202-02", refsource: "GENTOO", tags: [], url: "http://security.gentoo.org/glsa/glsa-201202-02.xml", }, { name: "48106", refsource: "SECUNIA", tags: [], url: "http://secunia.com/advisories/48106", }, ], }, }, impact: { baseMetricV2: { cvssV2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P", version: "2.0", }, exploitabilityScore: 10, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, severity: "MEDIUM", userInteractionRequired: false, }, }, lastModifiedDate: "2018-01-06T02:29Z", publishedDate: "2011-10-10T10:55Z", }, }, }
Log in or create an account to share your comment.
This schema specifies the format of a comment related to a security advisory.
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.