GoogleOSV:DSA-1382-1quagga
3.5 Low
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:N/A:P
It was discovered that BGP peers can trigger a NULL pointer dereference
in the BGP daemon if debug logging is enabled, causing the BGP daemon to
crash.
For the old stable distribution (sarge), this problem has been fixed in
version 0.98.3-7.5.
For the stable distribution (etch), this problem has been fixed in
version 0.99.5-5etch3.
For the unstable distribution (sid), this problem has been fixed in
version 0.99.9-1.
We recommend that you upgrade your quagga packages.
| CPE | Name | Operator | Version |
|---|---|---|---|
| quagga | eq | 0.98.3-7.4 | |
| quagga | eq | 0.98.3-7 | |
| quagga | eq | 0.98.3-7.1 | |
| quagga | eq | 0.98.3-7.3 | |
| quagga | eq | 0.98.3-7.2 |
References
Related
3.5 Low
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:N/A:P