NVD

Id
9994  
Name
CVE-2011-3327  
Description
Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by sending a crafted BGP UPDATE message over IPv4.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-10-10  
Modified Date
2012-11-06  
Seq
2011-3327  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
57265 9994 CVE-2011-3327 http://code.quagga.net/?p=quagga.git;a=commit;h=94431dbc753171b48b5c6806af97fd690813b00a  View
57266 9994 CVE-2011-3327 SUSE-SU-2011:1075  View
57267 9994 CVE-2011-3327 openSUSE-SU-2011:1155  View
57268 9994 CVE-2011-3327 SUSE-SU-2011:1171  View
57269 9994 CVE-2011-3327 SUSE-SU-2011:1316  View
57270 9994 CVE-2011-3327 RHSA-2012:1258  View
57271 9994 CVE-2011-3327 RHSA-2012:1259  View
57272 9994 CVE-2011-3327 DSA-2316  View
57273 9994 CVE-2011-3327 VU#668534  View
57274 9994 CVE-2011-3327 http://www.quagga.net/download/quagga-0.99.19.changelog.txt  View
57275 9994 CVE-2011-3327 https://bugzilla.redhat.com/show_bug.cgi?id=738400  View
57276 9994 CVE-2011-3327 https://www.cert.fi/en/reports/2011/vulnerability539178.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32133 JVNDB-2011-002373 Quagga の ecommunity_ecom2str 関数におけるにおけるヒープベースのバッファオーバーフローの脆弱性 Quagga bgpd の bgp_ecommunity.c 内にある ecommunity_ecom2str 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2011-3327 51234 CVE-2011-3327 9994 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002373.html 2011-09-26 2012-11-13 View