VULNERABILITY INTELLIGENCE

CVE-2011-3324

CVSS score5 MEDIUM
EPSS probability4.67%
CISA KEVNot currently listed
Published2011-10-10
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via trailing zero values in the Link State Advertisement (LSA) header list of an IPv6 Database Description message.

Primary references