| commit | af143a26ef96ba9be7b9c0b151b7605e1c2c74cd | [log] [tgz] |
|---|---|---|
| author | CROSS <info@codenomicon.com> | Mon Sep 26 13:17:21 2011 +0400 |
| committer | Denis Ovsienko <infrastation@yandex.ru> | Mon Sep 26 18:39:52 2011 +0400 |
| tree | 52d988f2eb1ccaddec7a725ee30766593dfc1f6b | |
| parent | a1afbc6e1d56b06409de5e8d7d984d565817fd96 [diff] |
ospfd: CVE-2011-3326 (uknown LSA type segfault) This vulnerability (CERT-FI #514837) was reported by CROSS project. They have also suggested a fix to the problem, which was found acceptable. Quagga ospfd does not seem to handle unknown LSA types in a Link State Update message correctly. If LSA type is something else than one supported by Quagga, the default handling of unknown types leads to an error. * ospf_flood.c * ospf_flood(): check return value of ospf_lsa_install()