101 matches found
SuSE9 Security Update : quagga (YOU Patch Number 12416)
This update fixes a remote denial of service bug in quagga that can be triggered via an AS path containing ASN elements whose string representation is longer than expected. CVE-2009-1572 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
Path traversal
Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service process crash via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path...
Design/Logic Flaw
Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service process crash via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute...
CVE-2009-1154
Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service process crash via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute...
CVE-2009-2056
Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service process crash via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path...
CVE-2009-2056
Cisco IOS XR vulnerability CVE-2009-2056 affects Cisco IOS XR software 3.8.1 and earlier. A remote authenticated user can cause a denial of service (process crash) by sending a BGP UPDATE message with many AS numbers prepended to the AS path. The issue is triggered by long AS-path in BGP UPDATEs ...
Cisco IOS XR软件BGP更新拒绝服务漏洞
CVECAN ID: CVE-2009-2055 Cisco IOS是思科网络设备所使用的互联网操作系统。 Cisco IOS XR软件在接收到特定的无效BGP更新时会重置BGP对等端会话。当BGP对等端发布带有特殊无效属性的前缀时会出现这个漏洞。接收到这个前缀后Cisco IOS XR设备会通过发送通知来重启对等端会话，在发送端停止发送无效的破损更新之前对等端会话会震荡。 在接收无效的更新时，接收的Cisco IOS XR软件设备会显示类似于以下的日志消息： RP/0/RP0/CPU0:Aug 17 13:47:05.896 GMT: bgp122:...
CVE-2009-1154: Improper Restriction of Operations within the Bounds of a Memory Buffer
Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service process crash via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute...
Cisco IOS畸形BGP自治系统路径拒绝服务漏洞
Bugraq ID: 35862 CVE ID：CVE-2009-1168 Cisco IOS是一款流行的Internet操作系统。 Cisco IOS存在拒绝服务攻击，远程攻击者可以利用漏洞使设备重启。 处理AS路径段包含超过1000个自治系统的BGP更新时，会导致设备重载。如果一个受影响的4字节AS自治号BGP Speaker接收到来自2字节AS自治号的BGP Speaker提供的AS路径段包含超过1000个自治系统的BGP更新时，设备会由于内存破坏而崩溃，会显示"%%Software-forced reload"的错误信息。 成功利用此漏洞需要3个条件： -受影响的Cisco...
Quagga Denial of Service Vulnerability
This host is installed with Quagga for Linux and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbquaggadosvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Quagga Denial of Service Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Quagga Denial of Service Vulnerability
Quagga for Linux is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mandrake Security Advisory MDVSA-2009:109 (quagga)
The remote host is missing an update to quagga announced via advisory MDVSA-2009:109. OpenVAS Vulnerability Test $Id: mdksa2009109.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:109 quagga Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...
CVE-2009-1572
The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...
CVE-2009-1572
The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...
CVE-2009-1572
The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...
CVE-2009-1572
CVE-2009-1572 affects Quagga’s BGPD (bgpd) and can cause an in-memory denial-of-service crash when processing an AS path whose ASN element string representation is longer than expected. The vulnerability applies to Quagga 0.99.11 and earlier; remediation is to upgrade to 0.99.12 or later. OpenVAS...
CVE-2009-1572
The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...
CVE-2009-1572: Undefined Security Weakness
The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...
quagga -- Denial of Service
Debian Security Team reports: It was discovered that Quagga, an IP routing daemon, could no longer process the Internet routing table due to broken handling of multiple 4-byte AS numbers in an AS path. If such a prefix is received, the BGP daemon crashes with an assert failure leading to a denial...