CVE-2018-0020

Junos OS may be impacted by the receipt of a malformed BGP UPDATE which can lead to a routing process daemon rpd crash and restart. Receipt of a repeated malformed BGP UPDATEs can result in an extended denial of service condition for the device. This malformed BGP UPDATE does not propagate to oth...

tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgpattrprint...

CVE-2017-12319

A vulnerability in the Border Gateway Protocol BGP over an Ethernet Virtual Private Network EVPN for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service DoS condition, or potentially corrupt the BGP routing table,...

Quagga BGP backend program bgp_packet.c:bgp_capability_msg_parse denial of service vulnerability

Quagga is an open source routing software. Quagga BGP backend program bgppacket.c:bgpcapabilitymsgparse handles BGP OPEN messages with a security vulnerability that allows remote attackers to exploit the vulnerability by submitting a special request for a denial of service attack...

Quagga BGP Backend Program NOTIFY Denial of Service Vulnerability

Quagga is an open source routing software. Quagga BGP backend program handling NOTIFY has a security vulnerability that allows remote attackers to exploit the vulnerability to submit special requests for denial-of-service attacks...

CVE-2018-5380

The Quagga BGP daemon bgpd prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input...

CVE-2018-5379

The Quagga BGP daemon bgpd prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes. A successful attack could cause a denial of service or potentially allow an attacker to execute arbitrary code...

UBUNTU-CVE-2018-5380

The Quagga BGP daemon bgpd prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input...

UBUNTU-CVE-2018-5381

The Quagga BGP daemon bgpd prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgppacket.c:bgpcapabilitymsgparse function. The parser can enter an infinite loop on invalid capabilities if a Multi-Protocol capability does not have a recognized AFI/SAFI,...

PT-2018-3095 · Quagga +3 · Quagga +3

Name of the Vulnerable Software and Affected Versions: Quagga versions prior to 1.2.3 Description: The issue is related to errors in processing internal BGP code-to-string conversion tables used for debug, based on input. This can lead to a potential denial of service. Recommendations: For versio...

PT-2018-16935 · Quagga +3 · Quagga +3

Name of the Vulnerable Software and Affected Versions: Quagga versions prior to 1.2.3 Description: The issue is related to a bug in the parsing of "Capabilities" in BGP OPEN messages. Specifically, the bgp packet.c:bgp capability msg parse function can enter an infinite loop on invalid capabiliti...

The vulnerability of the aspath_put function in the Quagga software package for the Debian GNU/Linux operating system allows a hacker to cause a service failure.

The vulnerability of the aspathput function in the bgpd/bgpaspath.c file of the Quagga software for the Debian GNU/Linux operating system exists due to an incorrect mechanism for checking input data. The size of the ASPATH is calculated twice. Exploiting this vulnerability could allow a malicious...

Cumulus Linux FRRouting bgpd Information Disclosure Vulnerability

Cumulus Linux is an open network operating system from Cumulus Networks, Inc. FRRouting FRR is one of the suite of IP routing protocols for Linux and Unix platforms. bgpd is one of the border gateway protocols. A security vulnerability in bgpd in versions of FRR prior to 2.0.2 and 3.x prior to...

Cisco IOS XE Software Ethernet Virtual Private Network Denial of Service Vulnerability

Cisco IOS XE Software is a set of operating systems developed by Cisco for its network devices.Ethernet Virtual Private Network EVPN is one of the Ethernet virtual private network systems.Border Gateway Protocol BGP is one of the border gateway protocols. Border Gateway Protocol BGP is one of the...

ALPINE-CVE-2017-16227

The aspathput function in bgpd/bgpaspath.c in Quagga before 1.2.2 allows remote attackers to cause a denial of service session drop via BGP UPDATE messages, because ASPATH size calculation for long paths counts certain bytes twice and consequently constructs an invalid message...

UBUNTU-CVE-2017-16227

The aspathput function in bgpd/bgpaspath.c in Quagga before 1.2.2 allows remote attackers to cause a denial of service session drop via BGP UPDATE messages, because ASPATH size calculation for long paths counts certain bytes twice and consequently constructs an invalid message...

Juniper Junos OS Denial of Service Vulnerability (CNVD-2017-32281)

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Junos OS version 16.1R1. An attacker could exploit this vulnerability to cause ...

Juniper Junos OS Denial of Service Vulnerability (CNVD-2017-33973)

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Junos OS version 16.1R1. An attacker could exploit this vulnerability to cause ...

CVE-2017-10607

Juniper Networks Junos OS 16.1R1, and services releases based off of 16.1R1, are vulnerable to the receipt of a crafted BGP Protocol Data Unit PDU sent directly to the router, which can cause the RPD routing process to crash and restart. Unlike BGP UPDATEs, which are transitive in nature, this...

PT-2017-3918

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to a buffer over-read in the BGP parser of the tcpdump utility, specifically in the bgp capabilities print function. This can be exploited by a remote attacker to cause a denial ...