Code injection

The regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is configured for inbound routes, allows remote attackers to cause a denial of service device reload via a crafted AS path set, aka Bug ID CSCuf49554...

Cisco NX-OS Software BGP Regex Vulnerability

A vulnerability in the Border Gateway Protocol BGP code of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the affected device to reload. The vulnerability is due to an issue with the regex engine used when processing complex regular expressions. An attacker could...

(bgpd): Heap-based buffer overflow by decoding BGP UPDATE message with unknown AS_PATH attributes

Heap-based buffer overflow in the ecommunityecom2str function in bgpecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code by sending a crafted BGP UPDATE message over IPv4...

(bgpd): Heap-based buffer overflow by decoding BGP UPDATE message with unknown AS_PATH attributes

Heap-based buffer overflow in the ecommunityecom2str function in bgpecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code by sending a crafted BGP UPDATE message over IPv4...

Quagga < 0.99.12 BGPD Denial of Service Vulnerability

According to its self-reported version number, the installation of Quagga's BGP daemon listening on the remote host is affected by a denial of service vulnerability. The issue can be triggered via an AS path containing ASN elements whose string representation is longer than expected. C Tenable...

GLSA-201202-02 : Quagga: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201202-02 Quagga: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Quagga. Please review the CVE identifiers referenced below for details. Impact : A BGP peer could send a Route-Refresh message with...

Fedora 15 : quagga-0.99.18-2.fc15 (2011-3990)

Bug 654603 - CVE-2010-1674 quagga: DoS crash by processing malformed extended community attribute in a route - Bug 654614 - CVE-2010-1675 quagga: BGP session reset by processing BGP Update message with malformed AS-path attributes Note that Tenable Network Security has extracted the preceding...

RHEL 6 : quagga (RHSA-2011:0406)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0406 advisory. Quagga is a TCP/IP based routing software suite. The Quagga bgpd daemon implements the BGP Border Gateway Protocol routing protocol. A denia...

quagga: BGP session reset by processing BGP Update message with malformed AS-path attributes

bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service session reset via a malformed ASPATHLIMIT path attribute...

USN-1027-1: Quagga vulnerabilities

It was discovered that Quagga incorrectly handled certain Outbound Route Filtering ORF records. A remote authenticated attacker could use this flaw to cause a denial of service or potentially execute arbitrary code. The default compiler options for Ubuntu 8.04 LTS and later should reduce the...

CVE-2010-2949

CVE-2010-2949 affects Quagga bgpd prior to 0.99.17. The vulnerability arises from improper parsing of AS paths in BGP UPDATE messages, allowing remote attackers to trigger a denial of service via an unknown AS type in an AS path attribute (resulting in a NULL pointer dereference and daemon crash)...

CVE-2010-2949

bgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an unknown AS type in an AS path attribute in a BGP UPDATE message...

SuSE9 Security Update : quagga (YOU Patch Number 12416)

This update fixes a remote denial of service bug in quagga that can be triggered via an AS path containing ASN elements whose string representation is longer than expected. CVE-2009-1572 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Path traversal

Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service process crash via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path...

CVE-2009-1154

Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service process crash via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute...

Design/Logic Flaw

Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service process crash via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute...

CVE-2009-2056

Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service process crash via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path...

CVE-2009-2056

Cisco IOS XR vulnerability CVE-2009-2056 affects Cisco IOS XR software 3.8.1 and earlier. A remote authenticated user can cause a denial of service (process crash) by sending a BGP UPDATE message with many AS numbers prepended to the AS path. The issue is triggered by long AS-path in BGP UPDATEs ...

Cisco IOS XR软件BGP更新拒绝服务漏洞

CVECAN ID: CVE-2009-2055 Cisco IOS是思科网络设备所使用的互联网操作系统。 Cisco IOS XR软件在接收到特定的无效BGP更新时会重置BGP对等端会话。当BGP对等端发布带有特殊无效属性的前缀时会出现这个漏洞。接收到这个前缀后Cisco IOS XR设备会通过发送通知来重启对等端会话，在发送端停止发送无效的破损更新之前对等端会话会震荡。 在接收无效的更新时，接收的Cisco IOS XR软件设备会显示类似于以下的日志消息： RP/0/RP0/CPU0:Aug 17 13:47:05.896 GMT: bgp122:...

Cisco IOS畸形BGP自治系统路径拒绝服务漏洞

Bugraq ID: 35862 CVE ID：CVE-2009-1168 Cisco IOS是一款流行的Internet操作系统。 Cisco IOS存在拒绝服务攻击，远程攻击者可以利用漏洞使设备重启。 处理AS路径段包含超过1000个自治系统的BGP更新时，会导致设备重载。如果一个受影响的4字节AS自治号BGP Speaker接收到来自2字节AS自治号的BGP Speaker提供的AS路径段包含超过1000个自治系统的BGP更新时，设备会由于内存破坏而崩溃，会显示"%%Software-forced reload"的错误信息。 成功利用此漏洞需要3个条件： -受影响的Cisco...