CVE-2009-1572

Description (CNA)

The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://www.osvdb.org/54200
• http://secunia.com/advisories/35203
• http://secunia.com/advisories/34999
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:109
• http://www.securitytracker.com/id?1022164
• http://www.ubuntu.com/usn/usn-775-1
• http://www.openwall.com/lists/oss-security/2009/05/01/1
• http://marc.info/?l=quagga-dev&m=123364779626078&w=2
• http://thread.gmane.org/gmane.network.quagga.devel/6513
• http://www.debian.org/security/2009/dsa-1788
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50317
• http://secunia.com/advisories/35685
• https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01107.html
• http://secunia.com/advisories/35061
• http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526311
• https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01037.html
• http://www.securityfocus.com/bid/34817
• http://www.openwall.com/lists/oss-security/2009/05/01/2

ADP enrichment