It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent.

It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent.

libospf0-1.0.20160315-5.1 on GA media

Quagga: OSPFD Potential remote code exec (stack based buffer overflow) quagga: Buffer Overflow in IPv6 RA handling quagga: VPNv4 NLRI parser memcpys to stack on unchecked length quagga: denial of service vulnerability in BGP routing daemon quagga: Telnet interface input buffer allocates unbounded amounts of memory

Security update for quagga

Affected: Ubuntu:14.04:LTS: quagga, Ubuntu:16.04:LTS: quagga

It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent.