CVE-2006-2223: quagga Improper Input Validation

EPSS trend

Probability

11.28%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 11.28% on 18-09-2026

18-09-202618-10-2026

EPSS score

11.28%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaseremotelinuxVerified
Quagga Routing Software Suite 0.9x - RIPd RIPv1 Request Routing Table Disclosure
Maturity: weaponized

References

22 links

www.novell.com/linux/security/advisories/2006_17_sr.htmlVendor AdvisoryX Refsource SUSEAdvisory
usn.ubuntu.com/284-1/Vendor AdvisoryX Refsource UBUNTUWEB
exchange.xforce.ibmcloud.com/vulnerabilities/26243VDB EntryX Refsource XFWEB
secunia.com/advisories/20782Third Party AdvisoryX Refsource SECUNIAVendor AdvisoryAdvisory
secunia.com/advisories/20138Third Party AdvisoryX Refsource SECUNIAVendor AdvisoryAdvisory
www.securityfocus.com/archive/1/432823/100/0/threadedMailing ListX Refsource BUGTRAQWEB
secunia.com/advisories/20421Third Party AdvisoryX Refsource SECUNIAVendor AdvisoryAdvisory
www.osvdb.org/25224VDB EntryX Refsource OSVDBWEB
www.redhat.com/support/errata/RHSA-2006-0525.htmlVendor AdvisoryX Refsource REDHATWEB
secunia.com/advisories/20137Third Party AdvisoryX Refsource SECUNIAVendor AdvisoryAdvisory

Show all 22 references

bugzilla.quagga.net/show_bug.cgi?id=261X Refsource CONFIRMREPORT
securitytracker.com/id?1016204VDB EntryX Refsource SECTRACKWEB
secunia.com/advisories/19910Third Party AdvisoryX Refsource SECUNIAPatchVendor AdvisoryFIX
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9985VDB EntrySignatureX Refsource OVALWEB
www.securityfocus.com/bid/17808VDB EntryX Refsource BIDExploitPatchFIX
www.redhat.com/support/errata/RHSA-2006-0533.htmlVendor AdvisoryX Refsource REDHATWEB
www.gentoo.org/security/en/glsa/glsa-200605-15.xmlVendor AdvisoryX Refsource GENTOOWEB
secunia.com/advisories/21159Third Party AdvisoryX Refsource SECUNIAVendor AdvisoryAdvisory
www.securityfocus.com/archive/1/432822/100/0/threadedMailing ListX Refsource BUGTRAQWEB
www.debian.org/security/2006/dsa-1059Vendor AdvisoryX Refsource DEBIANAdvisory
secunia.com/advisories/20221Third Party AdvisoryX Refsource SECUNIAVendor AdvisoryAdvisory
secunia.com/advisories/20420Third Party AdvisoryX Refsource SECUNIAVendor AdvisoryAdvisory

Related vulnerabilities

CVE-2018-5381canonicalubuntu_linux+530.16%8y ago19-02-2018 13:00The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function. The parser can enter an infinite loop on invalid capabilities if a Multi-Protocol capability does not have a recognized AFI/SAFI, causing a denial of service.CVE-2018-5378canonicalubuntu_linux+374.20%8y ago19-02-2018 13:00The Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute length is invalid. Arbitrary data from the bgpd process may be sent over the network to a peer and/or bgpd may crash.CVE-2018-5380canonicalubuntu_linux+514.84%8y ago19-02-2018 13:00The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input.CVE-2018-5379canonicalubuntu_linux+1438.45%8y ago19-02-2018 13:00The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes. A successful attack could cause a denial of service or potentially allow an attacker to execute arbitrary code.CVE-2003-0795gnuzebra+28.43%22y ago18-11-2003 05:00The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial of service (crash) via a malformed telnet command to the telnet CLI port, which may trigger a null dereference.CVE-2013-2236ubuntuquagga+32.08%12y ago24-10-2013 01:00Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.

All vulnerabilities inquagga

CVE-2006-2223: quagga Improper Input Validation

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References