CVE-2012-5521

MediumCVSS 6.5/10Last modified Jun 16, 2026

Description

quagga (ospf6d) 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removal

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-617

Affected software

Vendor	Product	Versions
quagga	quagga	0.99.21

References

http://www.openwall.com/lists/oss-security/2012/11/13/14Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/56530Third Party Advisory, VDB Entry
https://access.redhat.com/security/cve/cve-2012-5521Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5521Issue Tracking, Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-5521Issue Tracking, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/80096Third Party Advisory, VDB Entry
https://security-tracker.debian.org/tracker/CVE-2012-5521Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/11/13/14Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/56530Third Party Advisory, VDB Entry
https://access.redhat.com/security/cve/cve-2012-5521Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5521Issue Tracking, Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-5521Issue Tracking, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/80096Third Party Advisory, VDB Entry
https://security-tracker.debian.org/tracker/CVE-2012-5521Third Party Advisory

Timeline

Published: Nov 25, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-55225.5MantisBT before 1.2.12 does not use an expected default value during decisions about whether a user may modify the status of a bug, which al CVE-2012-55235.5core/email_api.php in MantisBT before 1.2.12 does not properly manage the sending of e-mail notifications about restricted bugs, which might CVE-2012-55244.3The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which allows remote attacke CVE-2012-55254.7The get_page_from_gfn hypercall function in Xen 4.2 allows local PV guest OS administrators to cause a denial of service (crash) via a craft CVE-2012-55265.0CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attacker CVE-2012-55275.5Claws Mail vCalendar plugin: credentials exposed on interface CVE-2012-55293.5TraceManager in Firebird 2.5.0 and 2.5.1, when trace is enabled, allows remote authenticated users to cause a denial of service (NULL pointe CVE-2012-55302.1The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite arbitrary files via a CVE-2012-55314.3Multiple cross-site scripting (XSS) vulnerabilities in the GateIn Portal in JBoss Enterprise Portal Platform 5.2.2 allow remote attackers to CVE-2012-55324.9The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel before 3.8-rc1, allows local users to cause CVE-2012-55335.0The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial of service (infinite CVE-2012-55347.5The hook_process function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote attackers to execute arbitrary commands via shel