GNU Zebra vulnerabilities

3 CVEs affecting GNU Zebra, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2003-0859, published 2003-12-15.

More from GNU.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2003-0795, published 2003-12-15. Medium severity, CVSS 5.0. EPSS: 8.4% chance of exploitation in the next 30 days. The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial…
• CVE-2003-0859, published 2003-12-15. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.
• CVE-2003-0858, published 2003-12-15. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.