FreeBSD : quagga -- BGP OPEN denial of service vulnerability (1e14d46f-af1f-11e1-b242-00215af774f0)

CERT reports : If a pre-configured BGP peer sends a specially crafted OPEN message with a malformed ORF capability TLV, Quagga bgpd process will erroneously try to consume extra bytes from the input packet buffer. The process will detect a buffer overrun attempt before it happens and immediately...

RedHat Update for quagga RHSA-2011:0406-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

quagga -- BGP OPEN denial of service vulnerability

CERT reports: If a pre-configured BGP peer sends a specially-crafted OPEN message with a malformed ORF capability TLV, Quagga bgpd process will erroneously try to consume extra bytes from the input packet buffer. The process will detect a buffer overrun attempt before it happens and immediately...

Quagga BGP OPEN denial of service vulnerability

Overview Quagga, a routing software suite, contains a BGP OPEN vulnerability that result in a denial-of-service condition. Description CVE-2012-1820: Quagga version 0.99.20.1 and before contains a bug in BGP OPEN message handling. Program Impacted: bgpd: fix DoS in bgpcapabilityorf Description: I...

Debian: Security Advisory (DSA-2459-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1441-1: Quagga vulnerabilities

It was discovered that Quagga incorrectly handled Link State Update messages with invalid lengths. A remote attacker could use this flaw to cause Quagga to crash, resulting in a denial of service. CVE-2012-0249, CVE-2012-0250 It was discovered that Quagga incorrectly handled messages with a...

DSA-2459-2 quagga - regression

Bulletin has no description...

Debian Security Advisory DSA 2459-1 (quagga)

The remote host is missing an update to quagga announced via advisory DSA 2459-1. OpenVAS Vulnerability Test $Id: deb24591.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2459-1 quagga Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: quagga

The remote host is missing an update to the system as announced in the referenced advisory. VID 42a2c82a-75b9-11e1-89b4-001ec9578670 OpenVAS Vulnerability Test $ Description: Auto generated from VID 42a2c82a-75b9-11e1-89b4-001ec9578670 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: quagga

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian Security Advisory DSA 2459-1 (quagga)

The remote host is missing an update to quagga announced via advisory DSA 2459-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Debian DSA-2459-2 : quagga - several vulnerabilities

Several vulnerabilities have been discovered in Quagga, a routing daemon. - CVE-2012-0249 A buffer overflow in the ospflsupdlistlsa function in the OSPFv2 implementation allows remote attackers to cause a denial of service assertion failure and daemon exit via a Link State Update aka LS Update...

[SECURITY] [DSA 2459-1] quagga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2459-1 [email protected] http://www.debian.org/security/ Florian Weimer April 26, 2012 http://www.debian.org/security/faq -...

DSA-2459-1 quagga - several

Bulletin has no description...

CVE-2012-0255

The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service assertion failure and daemon exit via a message associated with a malformed Four-octet AS Number Capability aka AS4...

Design/Logic Flaw

The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service assertion failure and daemon exit via a message associated with a malformed Four-octet AS Number Capability aka AS4...

CVE-2012-0255

The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service assertion failure and daemon exit via a message associated with a malformed Four-octet AS Number Capability aka AS4...

CVE-2012-0255

Removed by vendor...

CVE-2012-0255

The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service assertion failure and daemon exit via a message associated with a malformed Four-octet AS Number Capability aka AS4...

PT-2012-1082

Name of the Vulnerable Software and Affected Versions Quagga versions prior to 0.99.20.1 Quagga versions prior to 0.99.22.4 Description The issue concerns multiple vulnerabilities in the Quagga package, which can lead to disruption of confidentiality, integrity, and availability of protected...