Denial Of Service (DoS)

quagga is vulnerable to denial of service. The aspathput function in bgpd/bgpaspath.c allows remote attackers to cause session drop via malicious BGP UPDATE messages as ASPATH size calculation for long paths counts certain bytes twice and consequently constructs an invalid message...

Design/Logic Flaw

The aspathput function in bgpd/bgpaspath.c in Quagga before 1.2.2 allows remote attackers to cause a denial of service session drop via BGP UPDATE messages, because ASPATH size calculation for long paths counts certain bytes twice and consequently constructs an invalid message...

CVE-2017-16227

The aspathput function in bgpd/bgpaspath.c in Quagga before 1.2.2 allows remote attackers to cause a denial of service session drop via BGP UPDATE messages, because ASPATH size calculation for long paths counts certain bytes twice and consequently constructs an invalid message...