CVE-2006-2224

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.

View graph Watch Export

CVSS v3.1

—

EPSS

10.4%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Connections

2 relationships

CWE-287

source

Timeline

disclosure → media coverage

May 5, 2006

Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026