Huawei EulerOS: Security Advisory for quagga (EulerOS-SA-2019-2657)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-2342

Removed by vendor...

CVE-2016-2342

The CVE-2016-2342 issue affects Quagga’s bgpd component, specifically the VPNv4 NLRI parser (bgp_mplsvpn.c). A stack-based buffer overflow arises when handling Labeled-VPN SAFI routes data due to incorrect length handling during a data copy, enabling a remote attacker to potentially execute arbit...

CVE-2016-2342: Improper Restriction of Operations within the Bounds of a Memory Buffer

The bgpnlriparsevpnv4 function in bgpmplsvpn.c in the VPNv4 NLRI parser in bgpd in Quagga before 1.0.20160309, when a certain VPNv4 configuration is used, relies on a Labeled-VPN SAFI routes-data length field during a data copy, which allows remote attackers to execute arbitrary code or cause a...