CVE-2012-1820

2012-06-1300:00:00

ubuntu.com

2.9 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:N/I:N/A:P

0.011 Low

EPSS

Percentile

84.6%

JSON

The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier
allows remote attackers to cause a denial of service (assertion failure and
daemon exit) by leveraging a BGP peering relationship and sending a
malformed Outbound Route Filtering (ORF) capability TLV in an OPEN message.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchquagga< 0.99.20.1-0ubuntu0.10.04.3UNKNOWN
ubuntu11.04noarchquagga< 0.99.20.1-0ubuntu0.11.04.3UNKNOWN
ubuntu11.10noarchquagga< 0.99.20.1-0ubuntu0.11.10.3UNKNOWN
ubuntu12.04noarchquagga< 0.99.20.1-0ubuntu0.12.04.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	quagga	< 0.99.20.1-0ubuntu0.10.04.3	UNKNOWN
ubuntu	11.04	noarch	quagga	< 0.99.20.1-0ubuntu0.11.04.3	UNKNOWN
ubuntu	11.10	noarch	quagga	< 0.99.20.1-0ubuntu0.11.10.3	UNKNOWN
ubuntu	12.04	noarch	quagga	< 0.99.20.1-0ubuntu0.12.04.3	UNKNOWN