CVE-2016-1245
CriticalSummary
A stack-based buffer overflow vulnerability was discovered in the zebra daemon in Quagga before version 1.0.20161017 when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ, which is system-dependent, leading to message size incompatibility.
Risk Assessment
This vulnerability could lead to remote code execution or service crashes, posing a serious security threat to the system. Organizations should be aware of the risks associated with using outdated software versions.
Recommendation
It is recommended to update Quagga to version 1.0.20161017 or later to mitigate this vulnerability. Additionally, conducting an audit of system configuration and security is advisable.
Original NVD description (English source)
It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent.