CVE-2012-1820: Quagga

Low severity, CVSS 2.9. EPSS: 1.1% chance of exploitation in the next 30 days.

The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering (ORF) capability TLV in an OPEN message.

Affected products

• Quagga Quagga: up to and including 0.99.20.1; version 0.95 only; version 0.96 only; version 0.96.1 only; version 0.96.2 only; version 0.96.3 only; …

Published 2012-06-13. Last modified 2026-06-16.