Ubuntu Security Notice USN-775-1 - It was discovered that the BGP service in Quagga did not correctly handle certain AS paths containing 4-byte ASNs. An authenticated remote attacker could exploit this flaw to cause bgpd to abort, leading to a denial of service.
443af3101cdb36466e16e3323416f91df72bbb49ad0eef51b7f6c65ef2e1eab6
Mandriva Linux Security Advisory 2009-109 - The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error. Updated packages are available that bring Quagga to version 0.99.12 which provides numerous bugfixes over the previous 0.99.9 version, and also corrects this issue.
86077359921c3f3e5b457d5cdad197f5dc0ff1715e6be8c6f41b9f24f1ffe952