VULNERABILITY INTELLIGENCE
CVE-2011-3326
CVSS score5 MEDIUM
EPSS probability4.63%
CISA KEVNot currently listed
Published2011-10-10
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P
Description
The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via an invalid Link State Advertisement (LSA) type in an IPv4 Link State Update message.