Quagga Routing Software Suite vulnerabilities

3 known vulnerabilities affecting quagga/quagga_routing_software_suite.

Total CVEs

3

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

MEDIUM2LOW1

Vulnerabilities

Page 1 of 1

CVE-2006-2224MEDIUMCVSS 5.0PoC≤ 0.99.3v0.95+3 more2006-05-05

CVE-2006-2224 [MEDIUM] CWE-287 CVE-2006-2224: RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirem RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.

CVE-2003-0859MEDIUMCVSS 4.9v0.96.22003-12-15

CVE-2003-0859 [MEDIUM] CVE-2003-0859: The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial o The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.

CVE-2003-0858LOWCVSS 2.1≤ 0.952003-12-15

CVE-2003-0858 [LOW] CWE-399 CVE-2003-0858: Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.