243 matches found
Scientific Linux Security Update : quagga on SL6.x i386/x86_64
A denial of service flaw was found in the way the Quagga bgpd daemon processed certain route metrics information. A BGP message with a specially crafted path limit attribute would cause the bgpd daemon to reset its session with the peer through which this message was received. CVE-2010-1675 A NUL...
Scientific Linux Security Update : quagga on SL4.x, SL5.x i386/x86_64
A stack-based buffer overflow flaw was found in the way the Quagga bgpd daemon processed certain BGP Route Refresh RR messages. A configured BGP peer could send a specially crafted BGP message, causing bgpd on a target system to crash or, possibly, execute arbitrary code with the privileges of th...
Quagga < 0.98.7 / 0.99.7 BGPD Denial of Service Vulnerability
According to its self-reported version number, the installation of Quagga's BGP daemon listening on the remote host is affected by a denial of service vulnerability. The issue can be triggered by a specially crafted UPDATE message from an explicitly configured BGP peer. C Tenable Network Security...
Quagga < 0.99.18 BGPD Multiple Denial of Service Vulnerabilities
According to its self-reported version number, the installation of Quagga's BGP daemon listening on the remote host is affected by multiple denial of service vulnerabilities : - A denial of service vulnerability can be triggered by a malformed ASPATHLIMIT path attribute. CVE-2010-1675 - A denial ...
Quagga < 0.99.20.1 Multiple Vulnerabilities
According to its self-reported version number, the installation of Quagga listening on the remote host is affected by multiple vulnerabilities : - A buffer overflow vulnerability exists in OSPFD can be triggered by a specially crafted Link Status Update message that is smaller than the length...
Quagga < 0.99.17 BGPD Multiple Vulnerabilities
According to its self-reported version number, the installation of Quagga's BGPD listening on the remote host is affected by multiple vulnerabilities : - A stack-based buffer overflow vulnerability can be triggered by a specially crafted BGP ROUTE-REFRESH message with a malformed Outbound Route...
CVE-2012-1820
The bgpcapabilityorf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service assertion failure and daemon exit by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering ORF capability TLV in an OPEN message...
Design/Logic Flaw
The bgpcapabilityorf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service assertion failure and daemon exit by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering ORF capability TLV in an OPEN message...
CVE-2012-1820
Summary of CVE-2012-1820 : In Quagga, the bgpd daemon (versions up to 0.99.20.1 and earlier) incorrectly processes the BGP ORF capability in OPEN messages, allowing a remote attacker with a configured BGP peer to trigger an assertion failure and crash bgpd, causing a denial of service. The root c...
CVE-2012-1820
The bgpcapabilityorf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service assertion failure and daemon exit by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering ORF capability TLV in an OPEN message...
CVE-2012-1820
The bgpcapabilityorf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service assertion failure and daemon exit by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering ORF capability TLV in an OPEN message...
Debian Security Advisory DSA 2459-2 (quagga)
The remote host is missing an update to quagga announced via advisory DSA 2459-2. OpenVAS Vulnerability Test $Id: deb24592.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2459-2 quagga Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
[SECURITY] [DSA 2459-2] quagga security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2459-2 [email protected] http://www.debian.org/security/ Florian Weimer May 04, 2012 http://www.debian.org/security/faq -...
CVE-2012-0255
CVE-2012-0255 affects the Quagga routing suiteās BGP implementation (bgpd). The issue is triggered by a malformed OPEN message associated with the Four-octet AS Number (AS4) capability, where bgpd does not properly use message buffers for OPEN messages. This can lead to a denial of service via as...
CVE-2012-0255
The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service assertion failure and daemon exit via a message associated with a malformed Four-octet AS Number Capability aka AS4...
FreeBSD : quagga -- multiple vulnerabilities (42a2c82a-75b9-11e1-89b4-001ec9578670)
CERT reports : The ospfd implementation of OSPF in Quagga allows a remote attacker on a local network segment with OSPF enabled to cause a denial of service daemon aborts due to an assert with a malformed OSPF LS-Update message. The ospfd implementation of OSPF in Quagga allows a remote attacker ...
CVE-2011-3327
Heap-based buffer overflow in the ecommunityecom2str function in bgpecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code by sending a crafted BGP UPDATE message over IPv4...
CVE-2011-3327
Removed by vendor...
CVE-2011-3327
CVE-2011-3327 : Quagga bgpd before 0.99.19 contains a heap-based buffer overflow in the function ecommunity_ecom2str within bgp_ecommunity.c. A crafted BGP UPDATE message over IPv4 can cause a daemon crash (DoS) or potentially allow remote code execution. Affected: Quagga/bgpd; vulnerable version...
FreeBSD : quagga -- two DoS vulnerabilities (b2a40507-5c88-11e0-9e85-00215af774f0)
Quagga developers report : Quagga 0.99.18 has been released. This release fixes 2 denial of services in bgpd, which can be remotely triggered by malformed AS-Pathlimit or Extended-Community attributes. These issues have been assigned CVE-2010-1674 and CVE-2010-1675. Support for AS-Pathlimit has...