Lucene search
PRIOn knowledge basePRION:CVE-2016-1245HistoryFeb 22, 2017 - 11:59 p.m.
Stack overflow
2017-02-2223:59:00
PRIOn knowledge base
www.prio-n.com
8
It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 8.0 | |
| quagga | le | 1.0.20160315 |
References
rhn.redhat.com/errata/RHSA-2017-0794.html
www.gossamer-threads.com/lists/quagga/users/31952
www.securityfocus.com/bid/93775
bugzilla.redhat.com/show_bug.cgi?id=1386109
github.com/Quagga/quagga/commit/cfb1fae25f8c092e0d17073eaf7bd428ce1cd546
security.gentoo.org/glsa/201701-48
www.debian.org/security/2016/dsa-3695
Related
nessus
nessus
SUSE SLES12 Security Update : quagga (SUSE-SU-2016:2618-1)
2016-10-26 00:00:00
Debian DSA-3695-1 : quagga - security update
2016-10-19 00:00:00
openSUSE Security Update : quagga (openSUSE-2016-1233)
2016-10-27 00:00:00
redhatcve
redhatcve
CVE-2016-1245
2016-10-18 08:18:46
osv
osv
quagga - security update
2016-10-18 00:00:00
CVE-2016-1245
2017-02-22 23:59:00
debian
debian
[SECURITY] [DSA 3695-1] quagga security update
2016-10-18 20:01:43
[SECURITY] [DLA 662-1] quagga security update
2016-10-18 12:11:41
openvas
openvas
Ubuntu: Security Advisory (USN-3110-1)
2016-10-26 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:2618-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:2569-1)
2021-06-09 00:00:00
ubuntucve
ubuntucve
CVE-2016-1245
2016-10-18 00:00:00
cve
cve
CVE-2016-1245
2017-02-22 23:59:00
suse
suse
Security update for quagga (important)
2016-10-26 14:20:36
Security update for quagga (important)
2016-10-19 22:08:32
Security update for quagga (important)
2016-10-24 18:17:33
nvd
nvd
CVE-2016-1245
2017-02-22 23:59:00
mageia
mageia
Updated quagga packages fix security vulnerability
2016-11-12 01:09:30
ubuntu
ubuntu
Quagga vulnerability
2016-10-25 00:00:00
debiancve
debiancve
CVE-2016-1245
2017-02-22 23:59:00
veracode
veracode
Buffer Overflow
2019-05-02 05:51:57
cvelist
cvelist
CVE-2016-1245
2017-02-22 23:00:00
gentoo
gentoo
Quagga: Multiple vulnerabilities
2017-01-21 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: quagga-0.99.24.1-3.fc23
2016-11-04 02:53:38
[SECURITY] Fedora 24 Update: quagga-0.99.24.1-4.fc24
2016-11-03 23:59:33
[SECURITY] Fedora 25 Update: quagga-0.99.24.1-4.fc25
2016-11-19 21:27:34
centos
centos
quagga security update
2017-03-24 15:42:29
redhat
redhat
(RHSA-2017:0794) Moderate: quagga security and bug fix update
2017-03-21 06:17:51
rosalinux
rosalinux
Advisory ROSA-SA-2021-1960
2021-07-02 18:04:24
oraclelinux
oraclelinux
quagga security and bug fix update
2017-03-27 00:00:00