Quagga vulnerabilities

2012-05-15T00:00:00
ID USN-1441-1
Type ubuntu
Reporter Ubuntu
Modified 2012-05-15T00:00:00

Description

It was discovered that Quagga incorrectly handled Link State Update
messages with invalid lengths. A remote attacker could use this flaw to
cause Quagga to crash, resulting in a denial of service. (CVE-2012-0249,
CVE-2012-0250)

It was discovered that Quagga incorrectly handled messages with a malformed
Four-octet AS Number Capability. A remote attacker could use this flaw to
cause Quagga to crash, resulting in a denial of service. (CVE-2012-0255)