CVE-2016-1270

The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R6, 14.1 before 14.1R4, and 14.2 before 14.2R2, when configured with...

Code injection

The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R6, 14.1 before 14.1R4, and 14.2 before 14.2R2, when configured with...

CVE-2016-1270

The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R6, 14.1 before 14.1R4, and 14.2 before 14.2R2, when configured with...

CVE-2016-1270

Juniper Junos OS rpd daemon is vulnerable to a denial-of-service condition triggered by crafted BGP-based L2VPN/VPLS updates. Affected releases include several 12.x, 13.x, and 14.x trains listed in CVE-2016-1270; when the device is configured for BGP-based L2VPN or VPLS, processing a malformed L2...

[SECURITY] [DSA 3532-1] quagga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3532-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 27, 2016 https://www.debian.org/security/faq -...

DSA-3532-1 quagga - security update

Bulletin has no description...

Debian Security Advisory DSA 3532-1 (quagga - security update)

Kostya Kortchinsky discovered a stack-based buffer overflow vulnerability in the VPNv4 NLRI parser in bgpd in quagga, a BGP/OSPF/RIP routing daemon. A remote attacker can exploit this flaw to cause a denial of service daemon crash, or potentially, execution of arbitrary code, if bgpd is configure...

Ubuntu: Security Advisory (USN-2941-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2941-1: Quagga vulnerabilities

Kostya Kortchinsky discovered that Quagga incorrectly handled certain route data when configured with BGP peers enabled for VPNv4. A remote attacker could use this issue to cause Quagga to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2016-2342 It was discovered...

Quagga bgpd with BGP peers enabled for VPNv4 contains a buffer overflow vulnerability

Overview Quagga, version 0.99.24.1 and earlier, contains a buffer overflow vulnerability in bgpd with BGP peers enabled for VPNv4 that may leveraged to gain code execution. Description CWE-121: Stack-based Buffer Overflow - CVE-2016-2342Quagga is a software routing suite that implements numerous...

quagga -- stack based buffer overflow vulnerability

Donald Sharp reports: A malicious BGP peer may execute arbitrary code in particularly configured remote bgpd hosts...

CVE-2015-6351

Cisco ASR 5500 System Architecture Evolution SAE Gateway devices with software 19.1.0.61559 and 19.2.0 allow remote attackers to cause a denial of service BGP process restart via a crafted header in a BGP packet, aka Bug ID CSCuw65781...

Code injection

Cisco ASR 5500 System Architecture Evolution SAE Gateway devices with software 19.1.0.61559 and 19.2.0 allow remote attackers to cause a denial of service BGP process restart via a crafted header in a BGP packet, aka Bug ID CSCuw65781...

CVE-2004-0230

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service connection loss to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP...

CVE-2015-6351

Cisco ASR 5500 System Architecture Evolution SAE Gateway devices with software 19.1.0.61559 and 19.2.0 allow remote attackers to cause a denial of service BGP process restart via a crafted header in a BGP packet, aka Bug ID CSCuw65781...

CVE-2015-6351

Cisco ASR 5500 SAE Gateway devices running 19.1.0.61559 or 19.2.0 are vulnerable to a denial-of-service via crafted BGP headers due to insufficient input validation in the BGP packet handler. Exploitation can cause the BGP process to restart (partial DoS). Cisco has published a security advisory ...

Cisco ASR 5500 SAE Gateway BGP Denial of Service Vulnerability

A vulnerability in the Border Gateway Protocol BGP input packet handler in the Cisco ASR 5500 System Architecture Evolution SAE Gateway could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition because the BGP process restarts unexpectedly. The vulnerabili...

BlackHat topic analysis: analysis of BGP hijacking exploit-vulnerability warning-the black bar safety net

BGP hijacking in 2 0 0 8 years defcon conference once involved, however, in 2 0 1 5 year's blackhat has been selected as the subject, visible the seriousness of the problem, frozen three feet, a cold, BGP hijacking issues to organizations around the world work together to solve it. 0×0 0 what is ...

Juniper Junos BGP-VPLS Advertisements RPD DoS (JSA10687)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to improper handling of BGP-VPLS advertisements with updated BGP local preference values. A remote attacker can exploit this to crash RDP with a NULL pointer deferen...

CVE-2015-4284

Cisco IOS XR for ASR 9000 Series (5.3.0) is affected by CVE-2015-4284 in the Concurrent Data Management Replication process. The issue allows remote, unauthenticated attackers to trigger a denial of service by sending malformed BGPv4 packets, causing the BGP process to reload. Relevant advisories...