Showing 1 - 4 of 4

CVE-2010-1675

Status Candidate

Overview

bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (session reset) via a malformed AS_PATHLIMIT path attribute.

Gentoo Linux Security Advisory 201202-02: Posted Feb 22, 2012; Authored by Gentoo | Site security.gentoo.org; Gentoo Linux Security Advisory 201202-2 - Multiple vulnerabilities were found in Quagga, the worst of which leading to remote execution of arbitrary code. Versions less than 0.99.20 are affected.; tags | advisory, remote, arbitrary, vulnerability; systems | linux, gentoo; advisories | CVE-2010-1674, CVE-2010-1675, CVE-2010-2948, CVE-2010-2949, CVE-2011-3323, CVE-2011-3324, CVE-2011-3325, CVE-2011-3326, CVE-2011-3327; SHA-256 | b8876c9ae50f95f261a5d9e36d175f49669c64dc3f0cceabc82a13bd6ce2da34; Download | Favorite | View

Mandriva Linux Security Advisory 2011-058: Posted Apr 1, 2011; Authored by Mandriva | Site mandriva.com; Mandriva Linux Security Advisory 2011-058 - The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed Extended Communities attribute. bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service via a malformed AS_PATHLIMIT path attribute. Updated packages are available that bring Quagga to version 0.99.18 which provides numerous bugfixes over the previous 0.99.17 version, and also corrects these issues.; tags | advisory, remote, denial of service; systems | linux, mandriva; advisories | CVE-2010-1674, CVE-2010-1675; SHA-256 | d4c0f6cc4daa438fcc020c6831fdc5609a4890a1b60fb7729d8b61c7c0174599; Download | Favorite | View

Ubuntu Security Notice USN-1095-1: Posted Mar 29, 2011; Authored by Ubuntu | Site security.ubuntu.com; Ubuntu Security Notice 1095-1 - It was discovered that Quagga incorrectly parsed certain malformed extended communities. A remote attacker could use this flaw to cause Quagga to crash, resulting in a denial of service. It was discovered that Quagga resets BGP sessions when encountering malformed AS_PATHLIMIT attributes. A remote attacker could use this flaw to disrupt BGP sessions, resulting in a denial of service. This update removes AS_PATHLIMIT support from Quagga. This issue only affected Ubuntu 8.04 LTS, 9.10, 10.04 LTS and 10.10.; tags | advisory, remote, denial of service; systems | linux, ubuntu; advisories | CVE-2010-1674, CVE-2010-1675; SHA-256 | ace92018aca8cb5f956fcdd7df537578af7168e4da59950e1a0e8cf32c374692; Download | Favorite | View

Debian Security Advisory 2197-1: Posted Mar 21, 2011; Authored by Debian | Site debian.org; Debian Linux Security Advisory 2197-1 - It has been discovered that the Quagga routing daemon contains two denial-of-service vulnerabilities in its BGP implementation. A crafted Extended Communities attribute triggers a null pointer dereference which causes the BGP daemon to crash. The BGP daemon resets BGP sessions when it encounters malformed AS_PATHLIMIT attributes, introducing a distributed BGP session reset vulnerability which disrupts packet forwarding.; tags | advisory, vulnerability; systems | linux, debian; advisories | CVE-2010-1674, CVE-2010-1675; SHA-256 | 7b7212876c0dc85a313a39760b58246048b833cdff698a6fde7789df6595bc40; Download | Favorite | View

Page 1 of 1 Back 1 Next