CVE-2016-1245

It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent.

Database specific

{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "last_affected":  "8.0"
                }
            ],
            "source":  "CPE_FIELD",
            "vendor_product":  "debian:debian_linux"
        }
    ]
}

References

CVE-2016-1245

Affected packages