David Lamparter 發現 Quagga 未正確處理某些 IPv6 路由器廣告。遠端攻擊者可能會利用此問題造成 Quagga 損毀，進而導致拒絕服務。

請注意，Tenable Network Security 已直接從 Ubuntu 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

現已提供適用於 Red Hat Enterprise Linux 6 的 quagga 更新。Red Hat 產品安全性團隊已將此更新評等為具有中等安全性影響。可從〈參照〉一節的 CVE 連結中取得每個弱點之常見弱點評分系統 (CVSS) 的基本分數，其中包含有關嚴重性評等的詳細資訊。quagga 套件含有 Quagga，這是免費的網路路由軟體套件，可管理 TCP/IP 型通訊協定。Quagga 支援 BGP4、BGP4+、OSPFv2、OSPFv3、RIPv1、RIPv2 和 RIPng 通訊協定，預定當做路由伺服器和路由反射程式使用。安全性修正：* 在 Quagga 處理 IPv6 路由器廣告訊息的方式中，發現一個堆疊型緩衝區溢位缺陷。遠端攻擊者可利用此缺陷，使 zebra 程序損毀，進而導致拒絕服務。(CVE-2016-1245) * 在 Quagga BGP 路由程序 (bgpd) 處理 Labeled-VPN SAFI 路由資料的方式中，發現一個堆疊型緩衝區溢位缺陷。遠端攻擊者可利用此缺陷，使 bgpd 程序損毀，進而導致拒絕服務。(CVE-2016-2342) * 在 Quagga BGP 路由程序 (bgpd) 中發現一個拒絕服務缺陷。在某些情況下，遠端攻擊者可傳送特製封包，使 bgpd 程序損毀，進而導致拒絕服務。(CVE-2016-4049) * 在 Quagga 中發現一個影響多個程序的拒絕服務缺陷。遠端攻擊者可利用此缺陷，造成暴露其 telnet 介面的多個 Quagga 程序損毀。(CVE-2017-5495) * 在 Quagga OSPFD 程序處理 LSA (連結狀態廣告) 封包的方式中，發現一個堆疊型緩衝區溢位缺陷。遠端攻擊者可利用此缺陷，使 ospfd 程序損毀，進而導致拒絕服務。(CVE-2013-2236) 其他變更：如需有關此發行版本的詳細變更資訊，請參閱可從參照一節連結的 Red Hat Enterprise Linux 6.9 版本資訊與 Red Hat Enterprise Linux 6.9 技術提示。

According to the versions of the quagga package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - It was discovered that the zebra daemon in Quagga     before 1.0.20161017 suffered from a stack-based buffer     overflow when processing IPv6 Neighbor Discovery     messages. The root cause was relying on BUFSIZ to be     compatible with a message size however, BUFSIZ is     system-dependent.(CVE-2016-1245)

  - The Quagga BGP daemon (bgpd) prior to version 1.2.3 can     overrun internal BGP code-to-string conversion tables     used for debug by 1 pointer value, based on     input.(CVE-2018-5380)

  - The Quagga BGP daemon (bgpd) prior to version 1.2.3 has     a bug in its parsing of 'Capabilities' in BGP OPEN     messages, in the bgp_packet.c:bgp_capability_msg_parse     function. The parser can enter an infinite loop on     invalid capabilities if a Multi-Protocol capability     does not have a recognized AFI/SAFI, causing a denial     of service.(CVE-2018-5381)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for quagga fixes the following issue :

  - CVE-2016-1245: Fix for a zebra stack overrun in IPv6 RA     receive code. (bsc#1005258).

This update for quagga fixes the following issues :

  - CVE-2016-1245: Fix for a zebra stack overrun in IPv6 RA     receive code (bsc#1005258).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that there was stack overrun in IPv6 RA receive code in quagga, a BGP/OSPF/RIP routing daemon.

The buffer size specified when receiving mixed up two constants that have different values.

For Debian 7 'Wheezy', this issue has been fixed in quagga version 0.99.22.4-1+wheezy3+deb7u1.

We recommend that you upgrade your quagga packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201701-48 (Quagga: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Quagga. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could send a specially crafted packet possibly       resulting in the execution of arbitrary code with the privileges of the       process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer     overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be     compatible with a message size; however, BUFSIZ is system-dependent. (CVE-2016-1245)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名稱	產品	系列	已發布	已更新	嚴重性
94288	Ubuntu 14.04 LTS / 16.04 LTS：Quagga 弱點 (USN-3110-1)	Nessus	Ubuntu Local Security Checks	2016/10/26	2024/8/27	critical
97885	RHEL 6 : quagga (RHSA-2017:0794)	Nessus	Red Hat Local Security Checks	2017/3/22	2025/4/15	critical
130690	EulerOS 2.0 SP5 : quagga (EulerOS-SA-2019-2228)	Nessus	Huawei Local Security Checks	2019/11/8	2024/4/15	critical
94245	openSUSE Security Update : quagga (openSUSE-2016-1225)	Nessus	SuSE Local Security Checks	2016/10/25	2021/1/19	critical
94273	SUSE SLES11 Security Update : quagga (SUSE-SU-2016:2569-1)	Nessus	SuSE Local Security Checks	2016/10/26	2021/1/19	critical
94110	Debian DLA-662-1 : quagga security update	Nessus	Debian Local Security Checks	2016/10/19	2021/1/11	critical
96683	GLSA-201701-48 : Quagga: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2017/1/23	2021/1/11	critical
219375	Linux Distros Unpatched Vulnerability : CVE-2016-1245	Nessus	Misc.	2025/3/4	2025/9/3	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical