quagga: denial of service vulnerability in BGP routing daemon

A denial of service flaw was found in the Quagga BGP routing daemon bgpd. Under certain circumstances, a remote attacker could send a crafted packet to crash the bgpd daemon resulting in denial of service...

CVE-2017-3867

A vulnerability in the Border Gateway Protocol BGP Bidirectional Forwarding Detection BFD implementation of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to bypass the access control list ACL for specific TCP and UDP traffic. More Information:...

PT-2017-1543 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance versions 9.62 through 9.62.7 Cisco Adaptive Security Appliance versions prior to 9.71.1 Cisco Adaptive Security Appliance versions prior to 96.20.109 Cisco Adaptive Security Appliance versions prior to...

CVE-2016-1454

Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service device reload by leveraging a peer relationship to send a crafted BGP UPDATE message, aka Bug IDs CSCuq77105 and...

CISCO-SA-20160715-BGP

creationtimestamp| type| source ---|---|--- 2016-07-18 10:13:42+00:00| seen| https://t.me/itsecalert/34...

Cisco IOS and IOS XE Denial of Service Vulnerability (CNVD-2016-04937)

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices. A security vulnerability exists in Cisco IOS versions 12.4 and 15.0 through 15.5 and IOS XE versions 3.13 through 3.17. A remote attacker could exploit this vulnerability to cause a denial of...

CVE-2016-1459

Cisco IOS 12.4 and 15.0 through 15.5 and IOS XE 3.13 through 3.17 allow remote authenticated users to cause a denial of service device reload via crafted attributes in a BGP message, aka Bug ID CSCuz21061...

CVE-2016-4049

The bgpdumproutesfunc function in bgpd/bgpdump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of service assertion failure and daemon crash via a large BGP packet...

UBUNTU-CVE-2016-4049

The bgpdumproutesfunc function in bgpd/bgpdump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of service assertion failure and daemon crash via a large BGP packet...

The vulnerability of the Junos operating system, which allows a hacker to trigger a service failure

The vulnerability of the rpd daemon in the Junos operating system is related to incorrect data processing. Exploiting this vulnerability allows a malicious actor to trigger a service failure daemon reboots through a specially created BGP update using L2VPN...

Quagga BGP Routing Backend Program Denial of Service Vulnerability

The Quagga BGP Routing Daemon is a collection of daemons, managed by the core daemon zebra, which is mainly used to realize the exchange of routing information with peer nodes running the same routing protocol. The Quagga BGP Routing Daemon's bgpd uses regular dumps and allows remote attackers to...

Juniper Networks Junos OS BGP 'family l2vpn' UPDATE Denial of Service Vulnerability

Juniper Networks Junos OS is a network operating system dedicated to the company's hardware systems. A security vulnerability in Juniper Networks Junos OS using BGP based L2VPN and VPLS configuration allows remote attackers to conduct denial of service attacks by submitting a BGP 'family l2vpn'...

CVE-2016-1270

The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R6, 14.1 before 14.1R4, and 14.2 before 14.2R2, when configured with...

BSA-2016-1052

Security Advisory ID : BSA-2016-1052 Component : TCP Sequence Number Revision : 4.0: Final A vulnerability was discovered in the Transmission Control Protocol TCP specification RFC 873. TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a...

USN-2941-1 quagga vulnerabilities

Kostya Kortchinsky discovered that Quagga incorrectly handled certain route data when configured with BGP peers enabled for VPNv4. A remote attacker could use this issue to cause Quagga to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2016-2342 It was discovered...

Cisco ASR 5500 SAE Gateway Denial of Service Vulnerability

Cisco ASR 5500 System Architecture Evolution SAE Gateway is a Cisco ASR 5000 series mobile multimedia service solution gateway product from Cisco. A security vulnerability exists in the border gateway protocol input packet handler for the Cisco ASR 5500 SAE Gateway device versions 19.1.0.61559 an...

The vulnerability of the Business Process Manager operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the Concurrent Data Management Replication process in the Business Process Manager operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using a specially...

Cisco IOS XR for ASR 9000 Series Router Message Processing Target BGP Service Denial Vulnerability

Cisco IOS XR is a member of the Cisco IOS software family and uses a microkernel-based distribution operating system architecture. A security vulnerability in the Cisco ASR 9000 series routers allows a remote user to send specially crafted BGPv4 messages, resulting in device processing errors tha...

Juniper Junos BGP-VPLS Handling Denial of Service Vulnerability

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. A security vulnerability in Juniper Junos allows a remote attacker to send a large number of BGP-VPLS notices containing updated BGP local reference values, crashing the target RPD backen...

Juniper Junos Remote Denial of Service Vulnerability (CNVD-2015-00383)

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. Juniper Networks JUNOS fails to properly handle the BGP FlowSpec prefix, allowing an attacker to crash a routing program that can trigger assertion errors...