huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2013-1869: Satellite/Spacewalk: header injection flaw
Component: Satellite/Spacewalk
Severity: Moderate
Public date: 2014-02-10T00:00:00+00:00

CRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via the return_url parameter.


Affected upstream versions: n/a
Upstream repository: https://git.fedorahosted.org/cgit/spacewalk.git
Upstream fix commit: 18c70164285cae0660fa3ac55c6656bb19b3b13f
CVE-2013-1871: Satellite/Spacewalk: XSS in EditAddress page
Component: Satellite/Spacewalk
Severity: Moderate
CWE: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
Public date: 2014-02-10T00:00:00+00:00

Cross-site scripting (XSS) vulnerability in account/EditAddress.do in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary web script or HTML via the type parameter.


Affected upstream versions: n/a
Upstream repository: https://git.fedorahosted.org/cgit/spacewalk.git
Upstream fix commit: 18c70164285cae0660fa3ac55c6656bb19b3b13f
CVE-2013-1897: 389-ds: unintended information exposure when rootdse is enabled
Component: 389-ds
Severity: Low
Public date: 2013-03-28T00:00:00+00:00

The do_search function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anonymous-access configuration is set to rootdse and the BASE search scope is used, which allows remote attackers to obtain sensitive information outside of the rootDSE via a crafted LDAP search.


Affected upstream versions: n/a
Upstream repository: https://git.fedorahosted.org/cgit/389/ds.git
Upstream fix commit: 5a18c828533a670e7143327893f8171a19062286
CVE-2013-1914: glibc: Stack (frame) overflow in getaddrinfo() when processing entry mapping to long list of address structures
Component: glibc
Severity: Low
Public date: 2013-04-03T00:00:00+00:00

It was found that getaddrinfo() did not limit the amount of stack memory used during name resolution. An attacker able to make an application resolve an attacker-controlled hostname or IP address could possibly cause the application to exhaust all stack memory and crash.


Affected upstream versions: n/a
Fixed upstream versions: glibc-2.18
Upstream repository: https://sourceware.org/git/glibc.git
Upstream fix commit: 1cef1b19089528db11f221e938f60b9b048945d7
CVE-2013-1926: icedtea-web: class loader sharing for applets with same codebase paths
Component: icedtea-web
Severity: Moderate
Public date: 2013-04-17T00:00:00+00:00

The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets with the same codebase path but from different domains, which allows remote attackers to obtain sensitive information or possibly alter other applets via a crafted applet.


Affected upstream versions: n/a
Upstream repository: https://icedtea.classpath.org/hg/release/icedtea-web-1.2
Upstream fix commit: 34b6f60ae586
CVE-2013-1927: icedtea-web: GIFAR issue
Component: icedtea-web
Severity: Moderate
Public date: 2013-04-17T00:00:00+00:00

The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validates as both a GIF and a Java JAR file, aka "GIFAR."


Affected upstream versions: n/a
Upstream repository: https://icedtea.classpath.org/hg/release/icedtea-web-1.3
Upstream fix commit: 19f5282f53e8
CVE-2013-1928: Kernel: information leak in fs/compat_ioctl.c VIDEO_SET_SPU_PALETTE
Component: Kernel
Severity: Low
Public date: 2012-10-25T00:00:00+00:00

The do_video_set_spu_palette function in fs/compat_ioctl.c in the Linux kernel before 3.6.5 on unspecified architectures lacks a certain error check, which might allow local users to obtain sensitive information from kernel stack memory via a crafted VIDEO_SET_SPU_PALETTE ioctl call on a /dev/dvb device.

Statement: This issue does not affect the versions of the kernel package as shipped with
Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG 2.

This issue affects the version of Linux kernel as shipped with
Red Hat Enterprise Linux 6. Future kernel updates for Red Hat Enterprise Linux 6
may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.7
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 12176503366885edd542389eed3aaf94be163fdb
CVE-2013-1929: Kernel: tg3: buffer overflow in VPD firmware parsing
Component: Kernel
Severity: Low
Public date: 2013-03-27T00:00:00+00:00

Heap-based buffer overflow in the tg3_read_vpd function in drivers/net/ethernet/broadcom/tg3.c in the Linux kernel before 3.8.6 allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via crafted firmware that specifies a long string in the Vital Product Data (VPD) data structure.

Statement: This issue affects the versions of the Linux kernel as shipped with
Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2.

The Red Hat Security Response Team has rated this issue as having low security 
impact because physical access is needed to exploit this issue.  Future kernel 
updates for Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2 may 
address this issue. For additional information, refer to the Issue Severity 
Classification: https://access.redhat.com/security/updates/classification/.

Affected upstream versions: n/a
Fixed upstream versions: v3.9
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 715230a44310a8cf66fbfb5a46f9a62a9b2de424
CVE-2013-1943: kernel: kvm: missing check in kvm_set_memory_region()
Component: kernel
Severity: Important
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Public date: 2013-06-10T00:00:00+00:00

The KVM subsystem in the Linux kernel before 3.0 does not check whether kernel addresses are specified during allocation of memory slots for use in a guest's physical address space, which allows local users to gain privileges or obtain sensitive information from kernel memory via a crafted application, related to arch/x86/kvm/paging_tmpl.h and virt/kvm/kvm_main.c.

Statement: This issue does not affect the versions of Linux kernel as shipped with Red Hat Enterprise MRG 2.

Future kvm updates for Red Hat Enterprise Linux 5 may address this flaw.

This issue was addresses in Red Hat Enterprise Linux 6 via RHSA-2013:0911 (https://rhn.redhat.com/errata/RHSA-2013-0911.html).

Please note that unlike Red Hat Enterprise Linux 6, where a local unprivileged user could use this flaw to escalate their privileges on the system, on Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6.2 EUS, and Red Hat Enterprise Linux 6.3 EUS the impact is limited to potential information leak only.

Affected upstream versions: n/a
Fixed upstream versions: v3.0
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: fa3d315a4ce2c0891cdde262562e710d95fba19e
CVE-2013-1944: curl: Cookie domain suffix match vulnerability
Component: curl
Severity: Moderate
Public date: 2013-04-12T00:00:00+00:00

The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.


Affected upstream versions: n/a
Fixed upstream versions: curl-7_30_0
Upstream repository: https://github.com/bagder/curl
Upstream fix commit: 2eb8dcf26cb37f09cffe26909a646e702dbcab66
CVE-2013-1962: libvirt: DoS (max count of open files exhaustion) due sockets leak in the storage pool
Component: libvirt
Severity: Moderate
Public date: 2013-05-16T00:00:00+00:00

The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of requests "to list all volumes for the particular pool."


Affected upstream versions: n/a
Fixed upstream versions: v1.0.6
Upstream repository: https://libvirt.org/git/libvirt.git
Upstream fix commit: ca697e90d5bd6a6dfb94bfb6d4438bdf9a44b739
CVE-2013-1979: kernel: net: incorrect SCM_CREDENTIALS passing
Component: kernel
Severity: Important
Public date: 2013-04-23T00:00:00+00:00

The scm_set_cred function in include/net/scm.h in the Linux kernel before 3.8.11 uses incorrect uid and gid values during credentials passing, which allows local users to gain privileges via a crafted application.

Statement: This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 5 and 6.

This issue was addressed in Red Hat Enterprise MRG 2 via RHSA-2013:0829 https://rhn.redhat.com/errata/RHSA-2013-0829.html

Affected upstream versions: n/a
Fixed upstream versions: v3.9
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 83f1b4ba917db5dc5a061a44b3403ddb6e783494
CVE-2013-2006: keystone: DEBUG level LDAP password disclosure in log files
Component: keystone
Severity: Low
Public date: 2013-04-19T00:00:00+00:00

OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which allows local users to obtain sensitive by reading the log file.


Affected upstream versions: n/a
Fixed upstream versions: 2013.1.1
Upstream repository: https://github.com/openstack/keystone
Upstream fix commit: c5037dd6b82909efaaa8720e8cfa8bdb8b4a0edd
CVE-2013-2007: qemu: guest agent creates files with insecure permissions in deamon mode
Component: qemu
Severity: Moderate
Public date: 2013-05-06T00:00:00+00:00

The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.

Statement: This issue does not affect the kvm package as shipped with Red Hat Enterprise Linux 5.

This issue does not affect the xen package as shipped with Red Hat Enterprise Linux 5.

This issue does affect the qemu-kvm package as shipped with Red Hat Enterprise Linux 6. Future qemu-kvm updates in Red Hat Enterprise Linux 6 may address this flaw.

Please note that due to differences in upstream and Red Hat Enterprise Linux 6 versions of qemu guest agent this issue has lower security impact on systems running Red Hat Enterprise Linux 6.

Affected upstream versions: n/a
Fixed upstream versions: v1.5.0
Upstream repository: https://git.qemu.org/qemu.git
Upstream fix commit: c689b4f1bac352dcfd6ecb9a1d45337de0f1de67
CVE-2013-2017: kernel: veth: double-free flaw in case of congestion
Component: kernel
Severity: Moderate
Public date: 2010-05-06T00:00:00+00:00

The veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage skbs during congestion, which allows remote attackers to cause a denial of service (system crash) by leveraging lack of skb consumption in conjunction with a double-free error.

Statement: This issue does not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG 2.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.34
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 6ec82562ffc6f297d0de36d65776cff8e5704867
CVE-2013-2035: HawtJNI: predictable temporary file name leading to local arbitrary code execution
Component: HawtJNI
Severity: Low
CWE: CWE-377 (Insecure Temporary File)
Public date: 2013-05-13T00:00:00+00:00

The HawtJNI Library class wrote native libraries to a predictable file name in /tmp when the native libraries were bundled in a JAR file, and no custom library path was specified. A local attacker could overwrite these native libraries with malicious versions during the window between when HawtJNI writes them and when they are executed.


Affected upstream versions: n/a
Fixed upstream versions: hawtjni-project-1.8
Upstream repository: https://github.com/fusesource/hawtjni
Upstream fix commit: 92c266170ce98edc200c656bd034a237098b8aa5
CVE-2013-2058: Kernel: usb: chipidea: Allow disabling streaming not just in udc mode
Component: Kernel
Severity: Low
Public date: 2012-12-22T00:00:00+00:00

The host_start function in drivers/usb/chipidea/host.c in the Linux kernel before 3.7.4 does not properly support a certain non-streaming option, which allows local users to cause a denial of service (system crash) by sending a large amount of network traffic through a USB/Ethernet adapter.

Statement: This issue does not affect the versions of Linux kernel as shipped with
Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6.

This issue affects the version of the kernel package as shipped with
Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise MRG 2
may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.8
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 929473ea05db455ad88cdc081f2adc556b8dc48f
CVE-2013-2094: kernel: perf_swevent_enabled array out-of-bound access
Component: kernel
Severity: Important
CWE: CWE-1285 (Improper Validation of Specified Index, Position, or Offset in Input)
Public date: 2013-05-14T00:00:00+00:00

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call.

Statement: This issue does not affect the kernel packages as shipped with Red Hat Enterprise Linux 5 because we did not backport upstream commit b0a873eb that introduced this issue.

This issue was addressed in Red Hat Enterprise Linux 6 via RHSA-2013:0830 (https://rhn.redhat.com/errata/RHSA-2013-0830.html), Red Hat Enterprise Linux 6.1 Extended update support via RHSA-2013:0841 (https://rhn.redhat.com/errata/RHSA-2013-0841.html), Red Hat Enterprise Linux 6.2 Extended update support via RHSA-2013:0840 (https://rhn.redhat.com/errata/RHSA-2013-0840.html), Red Hat Enterprise Linux 6.3 Extended Update Support via RHSA-2013:0832 (https://rhn.redhat.com/errata/RHSA-2013-0832.html), and Red Hat Enterprise MRG 2 via RHSA-2013:0829 (https://rhn.redhat.com/errata/RHSA-2013-0829.html).

Red Hat Enterprise Linux 6.0 was not affected by this flaw.

Refer to https://access.redhat.com/site/solutions/373743 for further information.

Affected upstream versions: n/a
Fixed upstream versions: v3.9
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 8176cced706b5e5d15887584150764894e94e02f
CVE-2013-2116: gnutls: out of bounds read in _gnutls_ciphertext2compressed (GNUTLS-SA-2013-2)
Component: gnutls
Severity: Important
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2013-05-29T00:00:00+00:00

The _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in GnuTLS 2.12.23 allows remote attackers to cause a denial of service (buffer over-read and crash) via a crafted padding length.  NOTE: this might be due to an incorrect fix for CVE-2013-0169.


Affected upstream versions: n/a
Upstream repository: https://gitorious.org/gnutls/gnutls
Upstream fix commit: 5164d5a1d57cd0372a5dd074382ca960ca18b27d
CVE-2013-2128: Kernel: net: oops from tcp_collapse() when using splice(2)
Component: Kernel
Severity: Moderate
Public date: 2010-03-30T00:00:00+00:00

The tcp_read_sock function in net/ipv4/tcp.c in the Linux kernel before 2.6.34 does not properly manage skb consumption, which allows local users to cause a denial of service (system crash) via a crafted splice system call for a TCP socket.

Statement: This issue does not affect the versions of the kernel package as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG 2.

This issue affects the version of Linux kernel as shipped with Red Hat Enterprise Linux 6. Future kernel updates for Red Hat Enterprise Linux 6 may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.34
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: baff42ab1494528907bf4d5870359e31711746ae
CVE-2013-2132: pymongo: null pointer when decoding invalid DBRef
Component: pymongo
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2013-05-31T00:00:00+00:00

bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an "invalid DBRef."

Statement: Red Hat Update Infrastructure 2.1.3 is now in Production 2 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Update Infrastructure Life Cycle: https://access.redhat.com/support/policy/updates/rhui.

Affected upstream versions: n/a
Fixed upstream versions: 2.5.2
Upstream repository: https://github.com/mongodb/mongo-python-driver
Upstream fix commit: a060c15ef87e0f0e72974c7c0e57fe811bbd06a2
CVE-2013-2141: Kernel: signal: information leak in tkill/tgkill
Component: Kernel
Severity: Low
CWE: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
Public date: 2013-04-17T00:00:00+00:00

The do_tkill function in kernel/signal.c in the Linux kernel before 3.8.9 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted application that makes a (1) tkill or (2) tgkill system call.


Affected upstream versions: n/a
Fixed upstream versions: v3.9
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: b9e146d8eb3b9ecae5086d373b50fa0c1f3e7f0f
CVE-2013-2146: Kernel: perf/x86: offcore_rsp valid mask for SNB/IVB
Component: Kernel
Severity: Moderate
Public date: 2013-04-16T00:00:00+00:00

arch/x86/kernel/cpu/perf_event_intel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabled, specifies an incorrect bitmask, which allows local users to cause a denial of service (general protection fault and system crash) by attempting to set a reserved bit.

Statement: This issue does not affect the version of the kernel package as shipped with
Red Hat Enterprise Linux 5.

This issue affects the versions of Linux kernel as shipped with
Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2. Future kernel updates
for Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2 may address this
issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.9
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: f1923820c447e986a9da0fc6bf60c1dccdf0408e
CVE-2013-2164: Kernel: information leak in cdrom driver
Component: Kernel
Severity: Low
Public date: 2013-06-06T00:00:00+00:00

The mmc_ioctl_cdrom_read_data function in drivers/cdrom/cdrom.c in the Linux kernel through 3.10 allows local users to obtain sensitive information from kernel memory via a read operation on a malfunctioning CD-ROM drive.

Statement: This issue affects the versions of the Linux kernel as shipped with
Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2. Future kernel
updates for Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2 may
address this issue.

Affected upstream versions: n/a
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git/commit/drivers/cdrom/cdrom.c
Upstream fix commit: 050e4b8fb7cdd7096c987a9cd556029c622c7fe2
CVE-2013-2174: curl: Loop counter error, leading to heap-based buffer overflow when decoding certain URLs
Component: curl
Severity: Moderate
CWE: CWE-122 (Heap-based Buffer Overflow)
Public date: 2013-06-22T00:00:00+00:00

Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a "%" (percent) character.


Affected upstream versions: n/a
Fixed upstream versions: curl-7_31_0
Upstream repository: https://github.com/bagder/curl
Upstream fix commit: 192c4f788d48f82c03e9cef40013f34370e90737
CVE-2013-2206: kernel: sctp: duplicate cookie handling NULL pointer dereference
Component: kernel
Severity: Important
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2013-03-13T00:00:00+00:00

The sctp_sf_do_5_2_4_dupcook function in net/sctp/sm_statefuns.c in the SCTP implementation in the Linux kernel before 3.8.5 does not properly handle associations during the processing of a duplicate COOKIE ECHO chunk, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via crafted SCTP traffic.

Statement: This issue does affect Linux kernel packages as shipped with Red Hat Enterprise Linux 5 and 6.

This issue does not affect Linux kernel packages as shipped with Red Hat Enterprise MRG 2 as they already contain the fix.

Affected upstream versions: n/a
Fixed upstream versions: v3.9
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: f2815633504b442ca0b0605c16bf3d88a3a0fcea
CVE-2013-2232: Kernel: ipv6: using ipv4 vs ipv6 structure during routing lookup in sendmsg
Component: Kernel
Severity: Moderate
Public date: 2013-03-29T00:00:00+00:00

The ip6_sk_dst_check function in net/ipv6/ip6_output.c in the Linux kernel before 3.10 allows local users to cause a denial of service (system crash) by using an AF_INET6 socket for a connection to an IPv4 interface.

Statement: This issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2 may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.10
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: a963a37d384d71ad43b3e9e79d68d42fbe0901f3
CVE-2013-2234: Kernel: net: information leak in AF_KEY notify
Component: Kernel
Severity: Low
Public date: 2013-06-26T00:00:00+00:00

The (1) key_notify_sa_flush and (2) key_notify_policy_flush functions in net/key/af_key.c in the Linux kernel before 3.10 do not initialize certain structure members, which allows local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notify interface of an IPSec key_socket.

Statement: This issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2 may address this issue. This issue has been addressed for Red Hat Enterprise Linux 5 via RHSA-2013:1166 (https://rhn.redhat.com/errata/RHSA-2013-1166.html).

Affected upstream versions: n/a
Fixed upstream versions: v3.10
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: a5cc68f3d63306d0d288f31edfc2ae6ef8ecd887
CVE-2013-2236: Quagga: OSPFD Potential remote code exec (stack based buffer overflow)
Component: Quagga
Severity: Low
CWE: CWE-121 (Stack-based Buffer Overflow)
CVSS v3: 6.5 (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2013-07-02T00:00:00+00:00

A stack-based buffer overflow flaw was found in the way the Quagga OSPFD daemon handled LSA (link-state advertisement) packets. A remote attacker could use this flaw to crash the ospfd daemon resulting in denial of service.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/gitweb/quagga.git
Upstream fix commit: 3f872fe60463a931c5c766dbf8c36870c0023e88