oss-security - CVE request: Quagga OSPF-API stack overrun

Message-ID: <20130703211411.GL298336@jupiter.n2.diac24.net>
Date: Wed, 3 Jul 2013 23:14:11 +0200
From: David Lamparter <equinox@...c24.net>
To: oss-security@...ts.openwall.com
Subject: CVE request: Quagga OSPF-API stack overrun

Hi,

I guess I need a CVE number for this, we've discovered a local network
exploitable stack overrun in Quagga's ospfd.

Reference:
http://lists.quagga.net/pipermail/quagga-dev/2013-July/010621.html

Cheers,

-David
(Quagga maintainer)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.