MGASA-2017-0071

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2017-0071.html

Import Source

https://advisories.mageia.org/MGASA-2017-0071.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2017-0071

Related

CVE-2017-5495

Published

2017-03-03T10:09:43Z

Modified

2017-03-03T10:00:48Z

Summary

Updated quagga packages fix security vulnerability

Details

All versions of Quagga, 0.93 through 1.1.0, are vulnerable to an unbounded memory allocation in the telnet 'vty' CLI, leading to a Denial-of-Service of Quagga daemons, or even the entire host (CVE-2017-5495).

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:5 / quagga

Package

Name: quagga
Purl: pkg:rpm/mageia/quagga?distro=mageia-5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.99.22.4-4.4.mga5

Ecosystem specific

{
    "section": "core"
}