quagga -- out of boundary read

2007-05-17T00:00:00
ID DSA-1293
Type debian
Reporter Debian
Modified 2007-05-17T00:00:00

Description

Paul Jakma discovered that specially crafted UPDATE messages can trigger an out of boundary read that can result in a system crash of quagga, the BGP/OSPF/RIP routing daemon.

For the old stable distribution (sarge) this problem has been fixed in version 0.98.3-7.4.

For the stable distribution (etch) this problem has been fixed in version 0.99.5-5etch2.

For the unstable distribution (sid) this problem has been fixed in version 0.99.6-5.

We recommend that you upgrade your quagga package.