CVE-2009-1572

Related Files

Ubuntu Security Notice 775-1

Posted May 13, 2009

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice USN-775-1 - It was discovered that the BGP service in Quagga did not correctly handle certain AS paths containing 4-byte ASNs. An authenticated remote attacker could exploit this flaw to cause bgpd to abort, leading to a denial of service.

tags | advisory, remote, denial of service

systems | linux, ubuntu

advisories | CVE-2009-1572

SHA-256 | 443af3101cdb36466e16e3323416f91df72bbb49ad0eef51b7f6c65ef2e1eab6

Download | Favorite | View

Mandriva Linux Security Advisory 2009-109

Posted May 11, 2009

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2009-109 - The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error. Updated packages are available that bring Quagga to version 0.99.12 which provides numerous bugfixes over the previous 0.99.9 version, and also corrects this issue.

tags | advisory, remote, denial of service

systems | linux, mandriva

advisories | CVE-2009-1572

SHA-256 | 86077359921c3f3e5b457d5cdad197f5dc0ff1715e6be8c6f41b9f24f1ffe952

Download | Favorite | View