Quagga/quagga
GitHub
Releases208
Frequency2 months 3 weeks
Last Release
Stars373
Quagga Tracking repository - Master is at http://git.savannah.gnu.org/cgit/quagga.git
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 7.8 HIGH | 7.2 HIGH | ||
An issue was discovered in Quagga through 1.2.4. Unsafe chown/chmod operations in the suggested spec file allow users (with control of the non-root-owned directory /etc/quagga) to escalate their privileges to root upon package installation or update. | |||
| — | 7.5 HIGH | ||
It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent. | |||