USN-3471-1 quagga vulnerabilities

Andreas Jaggi discovered that Quagga incorrectly handled certain BGP UPDATE messages. A remote attacker could possibly use this issue to cause Quagga to crash, resulting in a denial of service. CVE-2017-16227 Quentin Young discovered that Quagga incorrectly handled memory in the telnet vty CLI. A...

Design/Logic Flaw

The aspathput function in bgpd/bgpaspath.c in Quagga before 1.2.2 allows remote attackers to cause a denial of service session drop via BGP UPDATE messages, because ASPATH size calculation for long paths counts certain bytes twice and consequently constructs an invalid message...

CVE-2017-16227

The aspathput function in bgpd/bgpaspath.c in Quagga before 1.2.2 allows remote attackers to cause a denial of service session drop via BGP UPDATE messages, because ASPATH size calculation for long paths counts certain bytes twice and consequently constructs an invalid message...

CVE-2017-16227

The aspathput function in bgpd/bgpaspath.c in Quagga before 1.2.2 allows remote attackers to cause a denial of service session drop via BGP UPDATE messages, because ASPATH size calculation for long paths counts certain bytes twice and consequently constructs an invalid message...

CVE-2017-16227

The aspathput function in bgpd/bgpaspath.c in Quagga before 1.2.2 allows remote attackers to cause a denial of service session drop via BGP UPDATE messages, because ASPATH size calculation for long paths counts certain bytes twice and consequently constructs an invalid message...

CVE-2017-16227: Improper Input Validation

The aspathput function in bgpd/bgpaspath.c in Quagga before 1.2.2 allows remote attackers to cause a denial of service session drop via BGP UPDATE messages, because ASPATH size calculation for long paths counts certain bytes twice and consequently constructs an invalid message...

Design/Logic Flaw

When the 'bgp-error-tolerance' feature " designed to help mitigate remote session resets from malformed path attributes " is enabled, a BGP UPDATE containing a specifically crafted set of transitive attributes can cause the RPD routing process to crash and restart. Devices with BGP enabled that d...

PT-2017-3182

Name of the Vulnerable Software and Affected Versions Quagga versions prior to 1.2.2 Description The issue is related to the aspath put function in bgpd/bgp aspath.c, which allows remote attackers to cause a denial of service session drop via BGP UPDATE messages. This is due to incorrect AS PATH...

Design/Logic Flaw

Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd routing process daemon crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition. The affected Junos OS...

CVE-2017-2313

Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd routing process daemon crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition. The affected Junos OS...

CVE-2017-2313

Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd routing process daemon crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition. The affected Junos OS...

CVE-2017-2313

CVE-2017-2313 affects Juniper Networks Junos OS. A crafted BGP UPDATE can trigger an rpd (routing process daemon) crash and restart, potentially causing extended DoS through repeated rpd crashes. Affected Junos OS versions include 15.1 family (before 15.1F2-S15, 15.1F5-S7, 15.1F6-S5, 15.1F7, 15.1...

CVE-2017-2313: Improper Input Validation

Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd routing process daemon crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition. The affected Junos OS...

Juniper Junos Routing Process Daemon BGP UPDATE DoS (JSA10778)

According to its self-reported version and configuration, the remote Juniper Junos device is affected by a denial of service vulnerability in the routing protocol daemon rpd when handling a specially crafted BGP UPDATE. An unauthenticated, remote attacker can exploit this to repeatedly crash and...

Juniper Networks Junos OS BGP UPDATE DoS Vulnerability

Junos OS is prone to a denial of service DoS vulnerability. when receiving BGP UPDATE messages. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cisco NX-OS Denial of Service Vulnerability (CNVD-2016-09438)

Cisco NX-OS on Nexus 2000, etc. is the United States Cisco Cisco company's set of operating system running in the Nexus 2000 and other series of devices. A denial of service vulnerability exists in Cisco NX-OS versions 4.0 through 7.3 and 11.0 through 11.2, which can be exploited by a remote...

Command injection

Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service device reload by leveraging a peer relationship to send a crafted BGP UPDATE message, aka Bug IDs CSCuq77105 and...

CVE-2016-1454: Improper Input Validation

Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service device reload by leveraging a peer relationship to send a crafted BGP UPDATE message, aka Bug IDs CSCuq77105 and...

PT-2016-4802

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 4.0 through 7.3 Cisco NX-OS versions 11.0 through 11.2 Description The issue allows remote attackers to cause a denial of service by sending a crafted BGP UPDATE message, leveraging a peer relationship. This is due to...

CVE-2016-1270

The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R6, 14.1 before 14.1R4, and 14.2 before 14.2R2, when configured with...