CVE-2013-6982

The BGP implementation in Cisco NX-OS 6.22a and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a denial of service peer reset via a crafted message, aka Bug ID CSCuj03174...

CVE-2013-6982

The CVE-2013-6982 issue affects Cisco NX-OS (6.2(2a) and earlier) where BGP UPDATE message processing fails to handle IPv6, VPNv4, and VPNv6 labeled unicast-address families correctly. This can allow an unauthenticated remote attacker to cause denial of service by resetting BGP peers via a crafte...

Cisco NX-OS Software Crafted Border Gateway Protocol Update Message Denial of Service Vulnerability

A vulnerability in the Border Gateway Protocol BGP functionality of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause all BGP sessions on the device to reset. The vulnerability is due to the improper processing of specifically crafted BGP update messages. An attacker...

Quagga 0.99.21 bgp_attr.c BGP Update DoS

According to its self-reported version number, the installation of Quagga's BGP daemon listening on the remote host is affected by a denial of service vulnerability. This issue exists due to a failure to properly initialize the packet's total size variable in the 'bgpattr.c' source file. Normal,...

CVE-2013-6051

The bgpattrunknown function in bgpattr.c in Quagga 0.99.21 does not properly initialize the total variable, which allows remote attackers to cause a denial of service bgpd crash via a crafted BGP update...

CVE-2013-6051

The bgpattrunknown function in bgpattr.c in Quagga 0.99.21 does not properly initialize the total variable, which allows remote attackers to cause a denial of service bgpd crash via a crafted BGP update...

Session fixation

The bgpattrunknown function in bgpattr.c in Quagga 0.99.21 does not properly initialize the total variable, which allows remote attackers to cause a denial of service bgpd crash via a crafted BGP update...

CVE-2013-6051

The bgpattrunknown function in bgpattr.c in Quagga 0.99.21 does not properly initialize the total variable, which allows remote attackers to cause a denial of service bgpd crash via a crafted BGP update...

Cisco IOS XR Software Malformed Border Gateway Protocol Attribute Vulnerability (cisco-sa-20120926-bgp)

Cisco IOS XR Software contains a vulnerability in the Border Gateway Protocol BGP routing protocol feature. The vulnerability can be triggered when the router receives a malformed attribute from a peer on an existing BGP session. Successful exploitation of this vulnerability can cause all BGP...

[SECURITY] [DSA 2803-1] quagga security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2803-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 26, 2013 http://www.debian.org/security/faq -...

quagga security vulnerabilities

OSPF parsing buffer overflow, BGP DoS...

Debian DSA-2803-1 : quagga - several vulnerabilities

Multiple vulnerabilities were discovered in Quagga, a BGP/OSPF/RIP routing daemon : - CVE-2013-2236 A buffer overflow was found in the OSPF API-server exporting the LSDB and allowing announcement of Opaque-LSAs. - CVE-2013-6051 bgpd could be crashed through BGP updates. This only affects...

[SECURITY] [DSA 2803-1] quagga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2803-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 26, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2803-1 (quagga - several vulnerabilities)

Multiple vulnerabilities were discovered in Quagga, a BGP/OSPF/RIP routing daemon: CVE-2013-2236 A buffer overflow was found in the OSPF API-server exporting the LSDB and allowing announcement of Opaque-LSAs. CVE-2013-6051 bgpd could be crashed through BGP updates. This only affects Wheezy/stable...

DSA-2803-1 quagga - several

Bulletin has no description...

Debian: Security Advisory (DSA-2803-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dennis Fisher and Mike Mimoso Discuss Do Not Track, We Are the Cavalry and more

Dennis Fisher and Mike Mimoso discuss the major security stories of the last two weeks, including the BGP route hijacking, why Do Not Track doesn’t work and the We Are the Cavalry movement. Download: digitalunderground135.mp3...

Route-Injection Attacks Redirect Internet Traffic

Attackers are accessing routers running on the border gateway protocol BGP and injecting additional hops that redirect large blocks of Internet traffic to locations where it can be monitored and even manipulated before being sent to its intended destination. Internet intelligence company Renesys...

Cisco NX-OS Software BGP Regex Vulnerability (Cisco-SA-20130917-CVE-2013-1121)

A vulnerability in the Border Gateway Protocol BGP code of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the affected device to reload. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

Cisco NX-OS Border Gateway Protocol Component DoS Vulnerability

A vulnerability in the Border Gateway Protocol BGP component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to create a denial of service DoS condition by causing the BGP service to reset and resync. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be...