Gnu Zebra vulnerabilities

3 vulnerabilities

Known vulnerabilities in Gnu Zebra, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

2.1CVE-2003-0858gnuzebra+3
EPSS score
0.36%
Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.4.9CVE-2003-0859gnuglibc+5
EPSS score
0.38%
The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.5CVE-2003-0795gnuzebra+2
EPSS score
8.43%
The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial of service (crash) via a malformed telnet command to the telnet CLI port, which may trigger a null dereference.