CVE-2006-2224
NoneCVSS
—
EPSS
10.4%
Published
May 5, 2006
CISA due date
—
The record
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | quagga | 0 | 0.99.3-2 |
| Debian:3.1 | quagga | 0 | 0.98.3-7.2 |
| Red Hat:enterprise_linux:3::as | quagga | 0 | 0:0.96.2-11.3E |
| Red Hat:enterprise_linux:3::as | quagga-debuginfo | 0 | 0:0.96.2-11.3E |
| Red Hat:enterprise_linux:3::es | quagga | 0 | 0:0.96.2-11.3E |
| Red Hat:enterprise_linux:3::es | quagga-debuginfo | 0 | 0:0.96.2-11.3E |
| Red Hat:enterprise_linux:4::as | quagga | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::as | quagga-contrib | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::as | quagga-debuginfo | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::as | quagga-devel | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::desktop | quagga | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::desktop | quagga-contrib | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::desktop | quagga-debuginfo | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::desktop | quagga-devel | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::es | quagga | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::es | quagga-contrib | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::es | quagga-debuginfo | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::es | quagga-devel | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::ws | quagga | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::ws | quagga-contrib | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::ws | quagga-debuginfo | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::ws | quagga-devel | 0 | 0:0.98.3-2.4E |
Related vulnerabilities
- CVE-2006-2223 RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations… Also affects quagga
- CVE-2026-56850 A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions… CWE-287
- CVE-2026-50365 Improper authentication in Windows RPC API allows an unauthorized attacker to elevate… CWE-287
- CVE-2026-55689 OpenFGA is an authorization/permission engine built for developers. CWE-287
- CVE-2026-49869 Kestra is an open-source, event-driven orchestration platform. CWE-287
- CVE-2026-55962 TLS 1.3 post-handshake authentication (PHA) issue where a server could accept a client's… CWE-287
- CVE-2026-11703 Missing SNI/ALPN binding on stateful (session-ID) resumption, which previously skipped… CWE-287
- CVE-2026-54089 File Browser is a file managing interface for uploading, deleting, previewing, renaming… CWE-287