144 matches found
CVE-2018-5381
The Quagga BGP daemon bgpd prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgppacket.c:bgpcapabilitymsgparse function. The parser can enter an infinite loop on invalid capabilities if a Multi-Protocol capability does not have a recognized AFI/SAFI,...
CVE-2018-5378
The Quagga BGP daemon bgpd prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute length is invalid. Arbitrary data from the bgpd process may be sent over the network to a peer and/or bgpd may crash...
quagga -- several security issues
Quagga reports: The Quagga BGP daemon, bgpd, does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute length is invalid. Arbitrary data from the bgpd process may be sent over the network to a peer and/or it may crash. The Quagga BGP daemon, bgpd, can double-free memor...
Mageia: Security Advisory (MGASA-2016-0165)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2016-0165 Updated quagga packages fix CVE-2016-4049
Updated quagga packages fix security vulnerability: A denial of dervice vulnerability have been found in BGP daemon from Quagga routing software bgpd: if the following conditions are satisfied: - regular dumping is enabled - bgpd instance has many BGP peers then BGP message packets that are big...
Updated quagga packages fix CVE-2016-4049
Updated quagga packages fix security vulnerability: A denial of dervice vulnerability have been found in BGP daemon from Quagga routing software bgpd: if the following conditions are satisfied: - regular dumping is enabled - bgpd instance has many BGP peers then BGP message packets that are big...
quagga -- stack based buffer overflow vulnerability
Donald Sharp reports: A malicious BGP peer may execute arbitrary code in particularly configured remote bgpd hosts...
Quagga < 0.99.9 BGPD Multiple Denial of Service Vulnerabilities
According to its self-reported version number, the installation of Quagga's BGP daemon listening on the remote host is affected by multiple denial of service vulnerabilities : - A denial of service vulnerability can be triggered by a malformed OPEN message from an explicitly configured BGP peer. ...
RHEL 6 : quagga (RHSA-2010:0945)
Updated quagga packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
PT-2010-1105 · Quagga +1 · Quagga +1
Name of the Vulnerable Software and Affected Versions: Quagga versions prior to 0.99.20 Description: The issue concerns multiple vulnerabilities in the Quagga package that can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and availability of protected...
Quagga Denial of Service Vulnerability
This host is installed with Quagga for Linux and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbquaggadosvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Quagga Denial of Service Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Quagga Denial of Service Vulnerability
Quagga for Linux is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-1572
The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...
Design/Logic Flaw
The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...
CVE-2009-1572
The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...
CVE-2009-1572
CVE-2009-1572 affects Quagga’s BGPD (bgpd) and can cause an in-memory denial-of-service crash when processing an AS path whose ASN element string representation is longer than expected. The vulnerability applies to Quagga 0.99.11 and earlier; remediation is to upgrade to 0.99.12 or later. OpenVAS...
CVE-2009-1572
Removed by vendor...
CVE-2009-1572
The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...
quagga -- Denial of Service
Debian Security Team reports: It was discovered that Quagga, an IP routing daemon, could no longer process the Internet routing table due to broken handling of multiple 4-byte AS numbers in an AS path. If such a prefix is received, the BGP daemon crashes with an assert failure leading to a denial...