Design/Logic Flaw

Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service process crash via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute...

CVE-2009-1154

Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service process crash via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute...

CVE-2009-2056

Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service process crash via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path...

CVE-2009-2056

Cisco IOS XR vulnerability CVE-2009-2056 affects Cisco IOS XR software 3.8.1 and earlier. A remote authenticated user can cause a denial of service (process crash) by sending a BGP UPDATE message with many AS numbers prepended to the AS path. The issue is triggered by long AS-path in BGP UPDATEs ...

Cisco IOS XR软件BGP更新拒绝服务漏洞

CVECAN ID: CVE-2009-2055 Cisco IOS是思科网络设备所使用的互联网操作系统。 Cisco IOS XR软件在接收到特定的无效BGP更新时会重置BGP对等端会话。当BGP对等端发布带有特殊无效属性的前缀时会出现这个漏洞。接收到这个前缀后Cisco IOS XR设备会通过发送通知来重启对等端会话，在发送端停止发送无效的破损更新之前对等端会话会震荡。 在接收无效的更新时，接收的Cisco IOS XR软件设备会显示类似于以下的日志消息： RP/0/RP0/CPU0:Aug 17 13:47:05.896 GMT: bgp122:...

Memory corruption

Cisco IOS 12.032S12 through 12.032S13 and 12.033S3 through 12.033S4, 12.032SY8 through 12.032SY9, 12.233SXI1, 12.2XNC before 12.233XNC2, 12.2XND before 12.233XND1, and 12.424T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows remote attackers to...

Cisco IOS畸形BGP自治系统路径拒绝服务漏洞

Bugraq ID: 35862 CVE ID：CVE-2009-1168 Cisco IOS是一款流行的Internet操作系统。 Cisco IOS存在拒绝服务攻击，远程攻击者可以利用漏洞使设备重启。 处理AS路径段包含超过1000个自治系统的BGP更新时，会导致设备重载。如果一个受影响的4字节AS自治号BGP Speaker接收到来自2字节AS自治号的BGP Speaker提供的AS路径段包含超过1000个自治系统的BGP更新时，设备会由于内存破坏而崩溃，会显示"%%Software-forced reload"的错误信息。 成功利用此漏洞需要3个条件： -受影响的Cisco...

Cisco IOS畸形边界网关协议更新拒绝服务漏洞

Bugraq ID: 35860 CVE ID：CVE-2009-2049 Cisco IOS是一款流行的Internet操作系统。 Cisco IOS处理边界网关协议存在拒绝服务攻击，远程攻击者可以利用漏洞使设备重启。 当受影响设备处理畸形BGP更新时可使设备重载。 成功利用此漏洞需要3个条件： -受影响的Cisco IOS软件设备为4字节AS自治号BGP Speaker -BGP对等邻居为2字节AS自治号BGP Speaker -BGP对等邻居能发送特殊构建的非RFC适应的BGP更新消息 此漏洞Cisco Bug ID为CSCta33973，CVEID为CVE-2009-2049。...

Cisco Security Advisory: Cisco IOS Software Border Gateway Protocol 4-Byte Autonomous System Number Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Software Border Gateway Protocol 4-Byte Autonomous System Number Vulnerabilities Advisory ID: cisco-sa-20090729-bgp http://www.cisco.com/warp/public/707/cisco-sa-20090729-bgp.shtml Revision: 1.0 ========= For Public...

Cisco IOS BGP DoS

Few denial of service conditions on BGP updates with 4-bytes AS numbers...

Ubuntu USN-775-2 (quagga)

The remote host is missing an update to quagga announced via advisory USN-775-2. OpenVAS Vulnerability Test $Id: ubuntu7752.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7752.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-775-2 quagga Authors: Thomas Rein...

Quagga Denial of Service Vulnerability

This host is installed with Quagga for Linux and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbquaggadosvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Quagga Denial of Service Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : quagga vulnerability (USN-775-1)

It was discovered that the BGP service in Quagga did not correctly handle certain AS paths containing 4-byte ASNs. An authenticated remote attacker could exploit this flaw to cause bgpd to abort, leading to a denial of service. Note that Tenable Network Security has extracted the preceding...

Quagga Denial of Service Vulnerability

Quagga for Linux is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandrake Security Advisory MDVSA-2009:109 (quagga)

The remote host is missing an update to quagga announced via advisory MDVSA-2009:109. OpenVAS Vulnerability Test $Id: mdksa2009109.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:109 quagga Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

CVE-2009-1572

The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...

CVE-2009-1572

The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...

CVE-2009-1572

The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...

CVE-2009-1572

CVE-2009-1572 affects Quagga’s BGPD (bgpd) and can cause an in-memory denial-of-service crash when processing an AS path whose ASN element string representation is longer than expected. The vulnerability applies to Quagga 0.99.11 and earlier; remediation is to upgrade to 0.99.12 or later. OpenVAS...

CVE-2009-1572

The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...