USN-6482-1

Source

https://ubuntu.com/security/notices/USN-6482-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/USN-6482-1.json

Related

Published

2023-11-15T14:24:42.130091Z

Modified

2023-11-15T14:24:42.130091Z

Summary

quagga vulnerabilities

Details

It was discovered that Quagga incorrectly handled certain BGP messages. A remote attacker could possibly use this issue to cause Quagga to crash, resulting in a denial of service.

References

Affected packages

Ubuntu:20.04:LTS / quagga

Package

Name: quagga

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0The exact introduced commit is unknown

Fixed

1.2.4-4ubuntu0.4

Ecosystem specific

{
    "availability": "No subscription needed",
    "binaries": [
        {
            "quagga-bgpd": "1.2.4-4ubuntu0.4",
            "quagga": "1.2.4-4ubuntu0.4",
            "quagga-ospf6d": "1.2.4-4ubuntu0.4",
            "quagga-ripd": "1.2.4-4ubuntu0.4",
            "quagga-pimd": "1.2.4-4ubuntu0.4",
            "quagga-ospfd": "1.2.4-4ubuntu0.4",
            "quagga-core": "1.2.4-4ubuntu0.4",
            "quagga-ripngd": "1.2.4-4ubuntu0.4",
            "quagga-isisd": "1.2.4-4ubuntu0.4",
            "quagga-doc": "1.2.4-4ubuntu0.4"
        }
    ]
}