Lucene search

K
freebsdFreeBSDB2A40507-5C88-11E0-9E85-00215AF774F0
HistoryApr 30, 2010 - 12:00 a.m.

quagga -- two DoS vulnerabilities

2010-04-3000:00:00
vuxml.freebsd.org
8

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.169 Low

EPSS

Percentile

96.0%

Quagga developers report:

Quagga 0.99.18 has been released.
This release fixes 2 denial of services in bgpd, which can be
remotely triggered by malformed AS-Pathlimit or Extended-Community
attributes. These issues have been assigned CVE-2010-1674 and
CVE-2010-1675. Support for AS-Pathlimit has been removed with this
release.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchquagga<Β 0.99.17_6UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.169 Low

EPSS

Percentile

96.0%