CVE-2012-0250 Memory corruption in n/a
Remote attackers can crash the Quagga OSPF daemon via a malformed Link State Update packet, causing denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2012-0250?
CVE-2012-0250 is a low-severity memory corruption vulnerability in n/a, published on 5 Apr 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service (daemon crash) via a Link State Update (aka LS Update) packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the value in the Length header field.
Weakness: CWE-119
Which versions are affected by CVE-2012-0250?
It affects 1 product.
Products include Quagga Quagga.
How do I fix CVE-2012-0250?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2012-0250 being exploited?
There is no known exploitation of CVE-2012-0250 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as AZL-44247, GHSA-w6rh-c4vv-wcr5.