CVE-2006-2276: quagga Resource Management Errors

EPSS trend

Probability

0.53%

Chance of exploitation in the next 30 days

Percentile

44%

Versus all other CVEs

30-day change

0.00 pp

From 0.53% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.53%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (osvdb.org)
Maturity: unknown
referenceUnverified
Exploit Reference (lists.quagga.net)
Maturity: unknown

References

18 links

usn.ubuntu.com/284-1/Vendor AdvisoryX Refsource UBUNTUWEB
www.quagga.net/news2.php?y=2006&m=5&d=4X Refsource CONFIRMPatchFIX
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10651VDB EntrySignatureX Refsource OVALWEB
www.osvdb.org/25245VDB EntryX Refsource OSVDBExploitPatchFIX
secunia.com/advisories/20782Third Party AdvisoryX Refsource SECUNIAVendor AdvisoryAdvisory
secunia.com/advisories/20138Third Party AdvisoryX Refsource SECUNIAVendor AdvisoryAdvisory
secunia.com/advisories/20421Third Party AdvisoryX Refsource SECUNIAVendor AdvisoryAdvisory
www.redhat.com/support/errata/RHSA-2006-0525.htmlVendor AdvisoryX Refsource REDHATWEB
secunia.com/advisories/20137Third Party AdvisoryX Refsource SECUNIAVendor AdvisoryAdvisory
lists.quagga.net/pipermail/quagga-dev/2006-March/004052.htmlMailing ListX Refsource MLISTExploitEVIDENCE

Show all 18 references

securitytracker.com/id?1016204VDB EntryX Refsource SECTRACKWEB
www.redhat.com/support/errata/RHSA-2006-0533.htmlVendor AdvisoryX Refsource REDHATWEB
www.gentoo.org/security/en/glsa/glsa-200605-15.xmlVendor AdvisoryX Refsource GENTOOWEB
www.debian.org/security/2006/dsa-1059Vendor AdvisoryX Refsource DEBIANAdvisory
secunia.com/advisories/20221Third Party AdvisoryX Refsource SECUNIAVendor AdvisoryAdvisory
secunia.com/advisories/20116Third Party AdvisoryX Refsource SECUNIAVendor AdvisoryAdvisory
secunia.com/advisories/20420Third Party AdvisoryX Refsource SECUNIAAdvisory
www.securityfocus.com/bid/17979VDB EntryX Refsource BIDWEB

Related vulnerabilities

CVE-2018-5381canonicalubuntu_linux+530.16%8y ago19-02-2018 13:00The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function. The parser can enter an infinite loop on invalid capabilities if a Multi-Protocol capability does not have a recognized AFI/SAFI, causing a denial of service.CVE-2018-5378canonicalubuntu_linux+374.20%8y ago19-02-2018 13:00The Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute length is invalid. Arbitrary data from the bgpd process may be sent over the network to a peer and/or bgpd may crash.CVE-2018-5380canonicalubuntu_linux+514.84%8y ago19-02-2018 13:00The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input.CVE-2018-5379canonicalubuntu_linux+1438.45%8y ago19-02-2018 13:00The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes. A successful attack could cause a denial of service or potentially allow an attacker to execute arbitrary code.CVE-2003-0795gnuzebra+28.43%22y ago18-11-2003 05:00The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial of service (crash) via a malformed telnet command to the telnet CLI port, which may trigger a null dereference.CVE-2013-2236ubuntuquagga+32.08%12y ago24-10-2013 01:00Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.

All vulnerabilities inquagga

CVE-2006-2276: quagga Resource Management Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References