CVE-2006-2224: Quagga Routing Software Suite

Medium severity, CVSS 5.0. EPSS: 10.4% chance of exploitation in the next 30 days.

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.

Affected products

• Quagga Quagga Routing Software Suite: up to and including 0.99.3; version 0.95 only; version 0.96.2 only; version 0.96.3 only; version 0.98.5 only

Published 2006-05-05. Last modified 2026-06-16.