Cisco IOS畸形边界网关协议更新拒绝服务漏洞

Bugraq ID: 35860 CVE ID：CVE-2009-2049 Cisco IOS是一款流行的Internet操作系统。 Cisco IOS处理边界网关协议存在拒绝服务攻击，远程攻击者可以利用漏洞使设备重启。 当受影响设备处理畸形BGP更新时可使设备重载。 成功利用此漏洞需要3个条件： -受影响的Cisco IOS软件设备为4字节AS自治号BGP Speaker -BGP对等邻居为2字节AS自治号BGP Speaker -BGP对等邻居能发送特殊构建的非RFC适应的BGP更新消息 此漏洞Cisco Bug ID为CSCta33973，CVEID为CVE-2009-2049。...

Cisco IOS Software Border Gateway Protocol 4-Byte Autonomous System Number Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco IOS BGP DoS

Few denial of service conditions on BGP updates with 4-bytes AS numbers...

Cisco Security Advisory: Cisco IOS Software Border Gateway Protocol 4-Byte Autonomous System Number Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Software Border Gateway Protocol 4-Byte Autonomous System Number Vulnerabilities Advisory ID: cisco-sa-20090729-bgp http://www.cisco.com/warp/public/707/cisco-sa-20090729-bgp.shtml Revision: 1.0 ========= For Public...

Ubuntu USN-775-2 (quagga)

The remote host is missing an update to quagga announced via advisory USN-775-2. OpenVAS Vulnerability Test $Id: ubuntu7752.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7752.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-775-2 quagga Authors: Thomas Rein...

Ubuntu: Security Advisory (USN-775-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 : quagga regression (USN-775-2)

USN-775-1 fixed vulnerabilities in Quagga. The preventative fixes introduced in Quagga prior to Ubuntu 9.04 could result in BGP service failures. This update fixes the problem. We apologize for the inconvenience. It was discovered that the BGP service in Quagga did not correctly handle certain AS...

USN-775-2: Quagga regression

USN-775-1 fixed vulnerabilities in Quagga. The preventative fixes introduced in Quagga prior to Ubuntu 9.04 could result in BGP service failures. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the BGP service in Quagga did not...

Ubuntu USN-775-1 (quagga)

The remote host is missing an update to quagga announced via advisory USN-775-1. OpenVAS Vulnerability Test $Id: ubuntu7751.nasl 8616 2018-02-01 08:24:13Z cfischer $ $Id: ubuntu7751.nasl 8616 2018-02-01 08:24:13Z cfischer $ Description: Auto-generated from advisory USN-775-1 quagga Authors: Thoma...

Quagga Denial of Service Vulnerability

This host is installed with Quagga for Linux and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbquaggadosvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Quagga Denial of Service Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Quagga Denial of Service Vulnerability

Quagga for Linux is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : quagga vulnerability (USN-775-1)

It was discovered that the BGP service in Quagga did not correctly handle certain AS paths containing 4-byte ASNs. An authenticated remote attacker could exploit this flaw to cause bgpd to abort, leading to a denial of service. Note that Tenable Network Security has extracted the preceding...

USN-775-1: Quagga vulnerability

It was discovered that the BGP service in Quagga did not correctly handle certain AS paths containing 4-byte ASNs. An authenticated remote attacker could exploit this flaw to cause bgpd to abort, leading to a denial of service...

Mandrake Security Advisory MDVSA-2009:109 (quagga)

The remote host is missing an update to quagga announced via advisory MDVSA-2009:109. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

CVE-2009-1572

The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...

CVE-2009-1572

The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...

Design/Logic Flaw

The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...

CVE-2009-1572

The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...

CVE-2009-1572

CVE-2009-1572 affects Quagga’s BGPD (bgpd) and can cause an in-memory denial-of-service crash when processing an AS path whose ASN element string representation is longer than expected. The vulnerability applies to Quagga 0.99.11 and earlier; remediation is to upgrade to 0.99.12 or later. OpenVAS...

CVE-2009-1572

The BGP daemon bgpd in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service crash via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error...