CVE-2016-1245 Memory corruption in Quagga before 1.0.20161017
A stack-based buffer overflow in the Quagga zebra daemon allows remote attackers to execute arbitrary code or cause a denial of service via crafted IPv6 Neighbor Discovery messages.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-1245?
CVE-2016-1245 is a critical memory corruption vulnerability in Debian Debian Linux, published on 22 Feb 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent.
Weakness: CWE-119
Which versions are affected by CVE-2016-1245?
It affects 2 products.
Linux distribution packages (6)
quagga SUSE:Linux Enterprise Server 11 SP4 | All versions | 0.99.15-0.29.1 |
quagga SUSE:Linux Enterprise Server 12 SP1 | All versions | 0.99.22.1-15.1 |
quagga SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | All versions | 0.99.15-0.29.1 |
quagga SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | All versions | 0.99.22.1-15.1 |
quagga SUSE:Linux Enterprise Software Development Kit 11 SP4 | All versions | 0.99.15-0.29.1 |
quagga SUSE:Linux Enterprise Software Development Kit 12 SP1 | All versions | 0.99.22.1-15.1 |
Products include Debian Debian Linux, Quagga Quagga.
How do I fix CVE-2016-1245?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2016-1245 being exploited?
There is no known exploitation of CVE-2016-1245 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DLA-662-1, DSA-3695-1, GHSA-578j-w5r9-87q8, MGASA-2016-0374, SUSE-SU-2016:2569-1, SUSE-SU-2016:2618-1 and 2 more.