CVE-2016-1245: quagga: Buffer Overflow in IPv6 RA handling

Severity: Critical

CVSS Score: 9.8

It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent.