CVE-2013-6051
quagga quagga: no CVSS score yet. EPSS 2.2% chance of exploitation in the next 30 days.
The bgp_attr_unknown function in bgp_attr.c in Quagga 0.99.21 does not properly initialize the total variable, which allows remote attackers to cause a denial of service (bgpd crash) via a crafted BGP update.
- EPSS
- 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- quagga:quagga
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730513
- http://git.savannah.gnu.org/gitweb/?p=quagga.git%3Ba=commitdiff%3Bh=8794e8d229dc9fe29ea31424883433d4880ef408
- http://www.debian.org/security/2013/dsa-2803
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730513
- http://git.savannah.gnu.org/gitweb/?p=quagga.git%3Ba=commitdiff%3Bh=8794e8d229dc9fe29ea31424883433d4880ef408