(bgpd): Stack buffer overflow by processing certain Route-Refresh messages

🗓️ 20 Oct 2010 16:19:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 2 Views

Stack overflow in bgpd RouteRefresh handling enables DoS or code execution via malformed ORF.

Reporter	Title	Published	Views	Family All 95
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	4	i386	quagga	0:0.98.3-4.el4_8.1	quagga-0:0.98.3-4.el4_8.1.i386.rpm
Red Hat Enterprise Linux	4	ia64	quagga	0:0.98.3-4.el4_8.1	quagga-0:0.98.3-4.el4_8.1.ia64.rpm
Red Hat Enterprise Linux	4	ppc	quagga	0:0.98.3-4.el4_8.1	quagga-0:0.98.3-4.el4_8.1.ppc.rpm
Red Hat Enterprise Linux	4	s390	quagga	0:0.98.3-4.el4_8.1	quagga-0:0.98.3-4.el4_8.1.s390.rpm
Red Hat Enterprise Linux	4	s390x	quagga	0:0.98.3-4.el4_8.1	quagga-0:0.98.3-4.el4_8.1.s390x.rpm
Red Hat Enterprise Linux	4	x86_64	quagga	0:0.98.3-4.el4_8.1	quagga-0:0.98.3-4.el4_8.1.x86_64.rpm
Red Hat Enterprise Linux	5	i386	quagga	0:0.98.6-5.el5_5.2	quagga-0:0.98.6-5.el5_5.2.i386.rpm
Red Hat Enterprise Linux	5	ia64	quagga	0:0.98.6-5.el5_5.2	quagga-0:0.98.6-5.el5_5.2.ia64.rpm
Red Hat Enterprise Linux	5	ppc	quagga	0:0.98.6-5.el5_5.2	quagga-0:0.98.6-5.el5_5.2.ppc.rpm
Red Hat Enterprise Linux	5	s390x	quagga	0:0.98.6-5.el5_5.2	quagga-0:0.98.6-5.el5_5.2.s390x.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2010-2948
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2010-2948
cve	www.cve.org/CVERecord

25 Jun 2026 10:36Current

6.5Medium risk

Vulners AI Score6.5

CVSS 26.5

EPSS0.04041

route refresh buffer overflow orf record denial of service quagga