CVE-2012-4098

Cisco NX-OS BGP DoS (CVE-2012-4098) affects the BGP component of Cisco NX-OS where improper filtering of AS paths allows remote attackers to trigger a denial-of-service by sending a malformed UPDATE, causing BGP service reset/resync. The public descriptions across NVD, Tenable/OSS and OpenVAS con...

CVE-2013-1121

The regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is configured for inbound routes, allows remote attackers to cause a denial of service device reload via a crafted AS path set, aka Bug ID CSCuf49554...

Code injection

The regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is configured for inbound routes, allows remote attackers to cause a denial of service device reload via a crafted AS path set, aka Bug ID CSCuf49554...

CVE-2013-1121

The regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is configured for inbound routes, allows remote attackers to cause a denial of service device reload via a crafted AS path set, aka Bug ID CSCuf49554...

CVE-2013-1121

The CVE-2013-1121 issue affects Cisco NX-OS BGP: the regex engine handling complex inbound route expressions can be triggered by crafted AS path sets, causing a remote, unauthenticated attacker to reload the device (DoS). Public sources (Cisco advisory) confirm the vulnerability and that software...

Cisco NX-OS Software BGP Regex Vulnerability

A vulnerability in the Border Gateway Protocol BGP code of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the affected device to reload. The vulnerability is due to an issue with the regex engine used when processing complex regular expressions. An attacker could...

Amazon Linux AMI : quagga (ALAS-2012-90)

The bgpcapabilityorf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service assertion failure and daemon exit by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering ORF capability TLV in an OPEN message. C Tenable...

CentOS 4 : tcpdump (CESA-2007:0387)

Updated tcpdump packages that fix a security issue and functionality bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Tcpdump is a command line tool for monitoring network traffic. Moritz Jodeit discovered a denial of...

Syrian Internet Connection Cut Off Again

For the second time this month, the civil war-torn nation of Syria lost its connection to the Internet this morning before emerging from the Internet blackout several hours later, according to information provided by Arbor Networks. Google’s Transparency report webpage revealed that at around 2:5...

Internet Blocked Briefly in Syria

Sometime around 2:45 PM EDT yesterday, Syria’s BGP routes were severed and the country disappeared from the Internet. Just as quickly as it had fallen, Syria came back online this morning. In March, the Middle Eastern nation entered the third year of a violent conflict in which the country’s ruli...

Mandriva Linux Security Advisory : quagga (MDVSA-2013:122)

Updated quagga package fixes security vulnerability : The bgpcapabilityorf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service assertion failure and daemon exit by leveraging a BGP peering relationship and sending a malformed Outbound Route...

Nmap NSE 6.01: asn-query

Maps IP addresses to autonomous system AS numbers. The script works by sending DNS TXT queries to a DNS server which in turn queries a third-party service provided by Team Cymru team-cymru.org using an in-addr.arpa style zone set up especially for use by Nmap. The responses to these queries conta...

Juniper Junos BGP UPDATE DoS (PSN-2012-10-733)

According to its self-reported version number, the remote Junos device could crash when processing a BGP UPDATE message containing a specially crafted flow specification NLRI. A remote attacker could exploit this to cause a denial of service. C Tenable Network Security, Inc. include"compat.inc"; ...

USN-1605-1: Quagga vulnerability

It was discovered that Quagga incorrectly handled certain malformed messages. A remote attacker could use this flaw to cause Quagga to crash, resulting in a denial of service...

Cisco IOS Software Malformed Border Gateway Protocol Attribute Vulnerability (cisco-sa-20120926-bgp)

Cisco IOS Software contains a vulnerability in the Border Gateway Protocol BGP routing protocol feature. The vulnerability can be triggered when the router receives a malformed attribute from a peer on an existing BGP session. Successful exploitation of this vulnerability can cause all BGP sessio...

Cisco Patches Numerous Bugs in IOS, UCM

Cisco has released nine security advisories for various products, including eight for its ubiquitous IOS operating system. Many of the vulnerabilities fixed in the patch release are denial-of-service flaws and none of them can give an attacker the ability to run code remotely on affected machines...

Design/Logic Flaw

The BGP implementation in Cisco IOS 15.2, IOS XE 3.5.xS before 3.5.2S, and IOS XR 4.1.0 through 4.2.2 allows remote attackers to cause a denial of service multiple connection resets by leveraging a peer relationship and sending a malformed attribute, aka Bug IDs CSCtt35379, CSCty58300, CSCtz63248...

CVE-2012-4617

The BGP implementation in Cisco IOS 15.2, IOS XE 3.5.xS before 3.5.2S, and IOS XR 4.1.0 through 4.2.2 allows remote attackers to cause a denial of service multiple connection resets by leveraging a peer relationship and sending a malformed attribute, aka Bug IDs CSCtt35379, CSCty58300, CSCtz63248...

CVE-2012-4617

The CVE-2012-4617 issue affects Cisco IOS, IOS XE, and IOS XR BGP implementations. A vulnerability exists where a router can be driven to a DoS by processing a malformed BGP attribute received from a peer on an existing BGP session, triggering multiple connection/session resets. The affected prod...

CVE-2012-4617

The BGP implementation in Cisco IOS 15.2, IOS XE 3.5.xS before 3.5.2S, and IOS XR 4.1.0 through 4.2.2 allows remote attackers to cause a denial of service multiple connection resets by leveraging a peer relationship and sending a malformed attribute, aka Bug IDs CSCtt35379, CSCty58300, CSCtz63248...