CVE-2013-6051

The bgpattrunknown function in bgpattr.c in Quagga 0.99.21 does not properly initialize the total variable, which allows remote attackers to cause a denial of service bgpd crash via a crafted BGP update...

Cisco IOS XR Software Malformed Border Gateway Protocol Attribute Vulnerability (cisco-sa-20120926-bgp)

Cisco IOS XR Software contains a vulnerability in the Border Gateway Protocol BGP routing protocol feature. The vulnerability can be triggered when the router receives a malformed attribute from a peer on an existing BGP session. Successful exploitation of this vulnerability can cause all BGP...

quagga security vulnerabilities

OSPF parsing buffer overflow, BGP DoS...

[SECURITY] [DSA 2803-1] quagga security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2803-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 26, 2013 http://www.debian.org/security/faq -...

Debian DSA-2803-1 : quagga - several vulnerabilities

Multiple vulnerabilities were discovered in Quagga, a BGP/OSPF/RIP routing daemon : - CVE-2013-2236 A buffer overflow was found in the OSPF API-server exporting the LSDB and allowing announcement of Opaque-LSAs. - CVE-2013-6051 bgpd could be crashed through BGP updates. This only affects...

[SECURITY] [DSA 2803-1] quagga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2803-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 26, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2803-1 (quagga - several vulnerabilities)

Multiple vulnerabilities were discovered in Quagga, a BGP/OSPF/RIP routing daemon: CVE-2013-2236 A buffer overflow was found in the OSPF API-server exporting the LSDB and allowing announcement of Opaque-LSAs. CVE-2013-6051 bgpd could be crashed through BGP updates. This only affects Wheezy/stable...

DSA-2803-1 quagga - several

Bulletin has no description...

Debian: Security Advisory (DSA-2803-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dennis Fisher and Mike Mimoso Discuss Do Not Track, We Are the Cavalry and more

Dennis Fisher and Mike Mimoso discuss the major security stories of the last two weeks, including the BGP route hijacking, why Do Not Track doesn’t work and the We Are the Cavalry movement. Download: digitalunderground135.mp3...

Route-Injection Attacks Redirect Internet Traffic

Attackers are accessing routers running on the border gateway protocol BGP and injecting additional hops that redirect large blocks of Internet traffic to locations where it can be monitored and even manipulated before being sent to its intended destination. Internet intelligence company Renesys...

Cisco NX-OS Software BGP Regex Vulnerability (Cisco-SA-20130917-CVE-2013-1121)

A vulnerability in the Border Gateway Protocol BGP code of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the affected device to reload. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

Cisco NX-OS Border Gateway Protocol Component DoS Vulnerability

A vulnerability in the Border Gateway Protocol BGP component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to create a denial of service DoS condition by causing the BGP service to reset and resync. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be...

Cisco NX-OS Software BGP DoS (CSCtn13055)

A vulnerability in the Border Gateway Protocol BGP component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to create a denial of service DoS condition by causing the BGP service to reset and resync. The vulnerability is due to improper filtering of invalid AS Path values...

CVE-2012-4099

The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service BGP service reset and resync via a malformed UPDATE message, aka Bug ID CSCtn13065...

CVE-2012-4097

The BGP implementation in Cisco NX-OS does not properly filter segment types in AS paths, which allows remote attackers to cause a denial of service BGP service reset via a malformed UPDATE message, aka Bug ID CSCtn13043...

Code injection

The BGP implementation in Cisco NX-OS does not properly filter segment types in AS paths, which allows remote attackers to cause a denial of service BGP service reset via a malformed UPDATE message, aka Bug ID CSCtn13043...

Code injection

The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service BGP service reset and resync via a malformed UPDATE message, aka Bug ID CSCtn13065...

CVE-2012-4097

CVE-2012-4097 affects Cisco NX-OS BGP: the BGP implementation does not properly filter segment types in AS paths, allowing remote attackers to trigger a denial of service (BGP service reset) via a malformed UPDATE message (Bug CSCtn13043). This is documented across multiple sources (NVD, Red Hat ...

CVE-2012-4099

Cisco NX-OS BGP implementation vulnerability CVE-2012-4099 allows remote attackers to trigger a denial of service (BGP service reset and resync) by sending a malformed UPDATE message due to improper AS-path filtering (Bug CSCtn13065). Affected component is the BGP/AS-path processing in NX-OS; imp...