CVE-2012-0255

Removed by vendor...

CVE-2012-0255

The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service assertion failure and daemon exit via a message associated with a malformed Four-octet AS Number Capability aka AS4...

FreeBSD : quagga -- multiple vulnerabilities (42a2c82a-75b9-11e1-89b4-001ec9578670)

CERT reports : The ospfd implementation of OSPF in Quagga allows a remote attacker on a local network segment with OSPF enabled to cause a denial of service daemon aborts due to an assert with a malformed OSPF LS-Update message. The ospfd implementation of OSPF in Quagga allows a remote attacker ...

quagga -- multiple vulnerabilities

CERT reports: The ospfd implementation of OSPF in Quagga allows a remote attacker on a local network segment with OSPF enabled to cause a denial of service daemon aborts due to an assert with a malformed OSPF LS-Update message. The ospfd implementation of OSPF in Quagga allows a remote attacker o...

Quagga contains multiple vulnerabilities

Overview Quagga, a routing software suite, contains multiple vulnerabilities that result in a denial-of-service condition. Description Quagga 0.99.20 and previous versions are susceptible to various denial-of-service conditions. The Quagga advisories state the following:CVE-2012-0249 :E rror in...

GLSA-201202-02 : Quagga: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201202-02 Quagga: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Quagga. Please review the CVE identifiers referenced below for details. Impact : A BGP peer could send a Route-Refresh message with...

Quagga: Multiple vulnerabilities

Background Quagga is a free routing daemon replacing Zebra supporting RIP, OSPF and BGP. Description Multiple vulnerabilities have been discovered in Quagga. Please review the CVE identifiers referenced below for details. Impact A BGP peer could send a Route-Refresh message with specially-crafted...

Juniper Junos BGP UPDATE Malformed ATTR_SET Attribute Remote DoS (PSN-2012-01-472)

According to its self-reported version number, the version of Junos running on the remote device has a denial of service vulnerability. Processing a BGP UPDATE containing a corrupted ATTRSET attribute can result in an rpd crash. This issue only affects routers configured for BGP running Junos 10....

Juniper Junos BGP Multiple Remote DoS (PSN-2012-01-475)

According to its self-reported version number, the version of Junos running on the remote host has multiple denial of service vulnerabilities. Either of the following issues could result in an rpd crash : - Receipt of a malformed non-transitive BGP PATH attribute - An established session...

Successful Shell Attack Detected - Cisco 'show ip bgp' Command

Binary data 6204.prm...

SuSE 10 Security Update : quagga (ZYPP Patch Number 7406)

This security update of quagga fixes : - Direct BGP peers can send malformed extended communities which lead to a NULL pointer dereference. CVE-2010-1674 - A malformed ASPATHLIMIT path attribute will cause a session reset in Quagga. This malformed package is forwarded by other routers and can be...

SuSE 10 Security Update : quagga (ZYPP Patch Number 7768)

This update fixes the following security issues : - 718056: OSPF6D buffer overflow while decoding Link State Update with Inter Area Prefix Lsa. CVE-2011-3323 - 718058: OSPF6D DoS while decoding Database Description packet. CVE-2011-3324 - 718059: OSPFD DoS while decoding Hello packet. CVE-2011-33...

Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : quagga vulnerabilities (USN-1261-1)

Riku Hietamaki, Tuomo Untinen and Jukka Taimisto discovered that Quagga incorrectly handled Link State Update messages with invalid lengths. A remote attacker could use this flaw to cause Quagga to crash, resulting in a denial of service. CVE-2011-3323 Riku Hietamaki, Tuomo Untinen and Jukka...

Juniper Junos MPC Malformed Route Prefix Remote DoS (PSN-2011-08-327)

According to its self-reported version number, the remote Juniper router has a denial of service vulnerability. Receiving specific route prefix install/delete actions e.g., a BGP routing update can cause the router to crash. This issue only affects MX Series routers with port concetrators based o...

Level3 Outage Causing Major Internet Issues

UPDATED–There were widespread Internet outages and slowdowns on Monday after backbone provider Level3 Communications had a major outage, affecting some downstream providers and enterprises. The company says that the problem stemmed from a software issue with some of its routers. A source with...

SuSE 10 Security Update : quagga (ZYPP Patch Number 7767)

This update fixes the following security issues : - 718056: OSPF6D buffer overflow while decoding Link State Update with Inter Area Prefix Lsa. CVE-2011-3323 - 718058: OSPF6D DoS while decoding Database Description packet. CVE-2011-3324 - 718059: OSPFD DoS while decoding Hello packet. CVE-2011-33...

quagga: fixing multiple vulnerabilities (important)

This update fixes the following security issues: - 718056: OSPF6D buffer overflow while decoding Link State Update with Inter Area Prefix Lsa CVE-2011-3323 - 718058: OSPF6D DoS while decoding Database Description packet CVE-2011-3324 - 718059: OSPFD DoS while decoding Hello packet CVE-2011-3325 -...

Debian Security Advisory DSA 2316-1 (quagga)

The remote host is missing an update to quagga announced via advisory DSA 2316-1. OpenVAS Vulnerability Test $Id: deb23161.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2316-1 quagga Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian: Security Advisory (DSA-2316-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: quagga

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...