Cisco ASR 5500 SAE Gateway Denial of Service Vulnerability

Cisco ASR 5500 System Architecture Evolution SAE Gateway is a Cisco ASR 5000 series mobile multimedia service solution gateway product from Cisco. A security vulnerability exists in the border gateway protocol input packet handler for the Cisco ASR 5500 SAE Gateway device versions 19.1.0.61559 an...

The vulnerability of the Business Process Manager operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the Concurrent Data Management Replication process in the Business Process Manager operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using a specially...

Cisco IOS XR for ASR 9000 Series Router Message Processing Target BGP Service Denial Vulnerability

Cisco IOS XR is a member of the Cisco IOS software family and uses a microkernel-based distribution operating system architecture. A security vulnerability in the Cisco ASR 9000 series routers allows a remote user to send specially crafted BGPv4 messages, resulting in device processing errors tha...

Juniper Junos BGP-VPLS Handling Denial of Service Vulnerability

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. A security vulnerability in Juniper Junos allows a remote attacker to send a large number of BGP-VPLS notices containing updated BGP local reference values, crashing the target RPD backen...

Juniper Junos Remote Denial of Service Vulnerability (CNVD-2015-00383)

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. Juniper Networks JUNOS fails to properly handle the BGP FlowSpec prefix, allowing an attacker to crash a routing program that can trigger assertion errors...

Cisco NX-OS Software Crafted Border Gateway Protocol Update Message Denial of Service Vulnerability (Cisco-SA-20140106-CVE-2013-6982)

A vulnerability in the Border Gateway Protocol BGP functionality of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause all BGP sessions on the device to reset. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources,...

RedHat Update for quagga RHSA-2012:1258-01

Check for the Version of quagga OpenVAS Vulnerability Test RedHat Update for quagga RHSA-2012:1258-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

(bgpd): Assertion failure by processing BGP OPEN message with malformed ORF capability TLV (VU#962587)

The bgpcapabilityorf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service assertion failure and daemon exit by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering ORF capability TLV in an OPEN message...

(bgpd): Assertion failure by processing malformed AS4 capability in BGP OPEN message

The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service assertion failure and daemon exit via a message associated with a malformed Four-octet AS Number Capability aka AS4...

(bgpd): Heap-based buffer overflow by decoding BGP UPDATE message with unknown AS_PATH attributes

Heap-based buffer overflow in the ecommunityecom2str function in bgpecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code by sending a crafted BGP UPDATE message over IPv4...

(bgpd): Heap-based buffer overflow by decoding BGP UPDATE message with unknown AS_PATH attributes

Heap-based buffer overflow in the ecommunityecom2str function in bgpecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code by sending a crafted BGP UPDATE message over IPv4...

CVE-2012-1367

The MallocLite implementation in Cisco IOS 12.0, 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service Route Processor crash via a BGP UPDATE message with a modified local-preference aka LOCALPREF attribute length, aka Bug ID CSCtq06538...

RedHat Update for quagga RHSA-2011:0406-01

Check for the Version of quagga OpenVAS Vulnerability Test RedHat Update for quagga RHSA-2011:0406-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

(bgpd): DoS (crash) while processing certain BGP update AS path messages

bgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an unknown AS type in an AS path attribute in a BGP UPDATE message...

Cisco Security Advisory: Cisco IOS XR Software Border Gateway Protocol Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS XR Software Border Gateway Protocol Vulnerability Advisory ID: cisco-sa-20100827-bgp Revision 1.0 For Public Release 2010 August 27 2200 UTC GMT +---------------------------------------------------------------------...

PT-2010-4507 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR versions 3.4.0 through 3.9.1 Description: The issue arises when Cisco IOS XR does not properly handle unrecognized transitive attributes in BGP, allowing remote attackers to cause a denial of service peering reset via a crafted...

Cisco IOS XR Software Border Gateway Protocol Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

PT-2009-4508 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR versions 3.4.0 through 3.8.1 Description: The issue allows remote attackers to cause a denial of service session reset via a BGP UPDATE message with an invalid attribute. This was demonstrated in the wild on 17 August 2009. The...

PT-2008-3675 · Century · Century Routers

Name of the Vulnerable Software and Affected Versions: Century routers affected versions not specified Description: The issue allows remote attackers to cause a denial of service, resulting in dropped sessions, via crafted BGP UPDATE messages. This can lead to route flapping. Recommendations: At...

PT-2007-7230 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper JUNOS versions 7.3 through 8.4 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending malformed BGP packets. This could be triggered by BGP UPDATE packets that cause session...