Lucene search

K
cve[email protected]CVE-2013-6051
HistoryDec 14, 2013 - 5:21 p.m.

CVE-2013-6051

2013-12-1417:21:00
NVD-CWE-noinfo
web.nvd.nist.gov
29
quagga
cve-2013-6051
bgp_attr_unknown
denial of service
nvd
vulnerability
security
update

6.2 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.008 Low

EPSS

Percentile

81.0%

The bgp_attr_unknown function in bgp_attr.c in Quagga 0.99.21 does not properly initialize the total variable, which allows remote attackers to cause a denial of service (bgpd crash) via a crafted BGP update.

CPENameOperatorVersion
quagga:quaggaquaggaeq0.99.21

6.2 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.008 Low

EPSS

Percentile

81.0%