NVD

Id
38323  
Name
CVE-2013-2236  
Description
Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-10-23  
Modified Date
2016-12-30  
Seq
2013-2236  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
195990 38323 CVE-2013-2236 http://git.savannah.gnu.org/gitweb/?p=quagga.git;a=commitdiff;h=3f872fe60463a931c5c766dbf8c36870c0023e88  View
195991 38323 CVE-2013-2236 [quagga-dev] 20130702 [quagga-dev 10568] ospfd, new_msg_lsa_change_notify: looks like a buffer overflow  View
195992 38323 CVE-2013-2236 http://nongnu.mirrors.hostinginnederland.nl//quagga/quagga-0.99.22.3.changelog.txt  View
195993 38323 CVE-2013-2236 [oss-security] 20130703 Re: CVE request: Quagga OSPF-API stack overrun  View
195994 38323 CVE-2013-2236 DSA-2803  View
195995 38323 CVE-2013-2236 60955  View
195996 38323 CVE-2013-2236 USN-2941-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23309 JVNDB-2013-004884 Quagga の OSPFD API の new_msg_lsa_change_notify 関数におけるスタックベースのバッファオーバーフローの脆弱性 Quagga の OSPFD API (ospf_api.c) の new_msg_lsa_change_notify 関数には、--enable-opaque-lsa および -a コマンドラインオプションが使用されている場合、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2013-2236 62178 CVE-2013-2236 38323 2.6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004884.html 2013-07-28 2014-04-07 View