← back
CVE-2009-1572

CVE-2009-1572

EPSS 3.5%
The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526311http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.htmlhttp://marc.info/?l=quagga-dev&m=123364779626078&w=2http://secunia.com/advisories/34999http://secunia.com/advisories/35061http://secunia.com/advisories/35203http://secunia.com/advisories/35685https://exchange.xforce.ibmcloud.com/vulnerabilities/50317https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01037.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-May/msg01107.htmlhttp://thread.gmane.org/gmane.network.quagga.devel/6513http://www.debian.org/security/2009/dsa-1788