QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2007-1995

Back to search

CVE-2007-1995

Published: Apr 12, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

bgpd/bgp_attr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not validate length values in the MP_REACH_NLRI and MP_UNREACH_NLRI attributes, which allows remote attackers to cause a denial of service (daemon crash or exit) via crafted UPDATE messages that trigger an assertion error or out of bounds read.

VendorProductVersions

n/a

n/a

affected
n/a

References

1018142
vdb-entry
x_refsource_SECTRACK
25119
third-party-advisory
x_refsource_SECUNIA
25084
third-party-advisory
x_refsource_SECUNIA
25312
third-party-advisory
x_refsource_SECUNIA
ADV-2007-1336
vdb-entry
x_refsource_VUPEN
ADV-2008-1195
vdb-entry
x_refsource_VUPEN
23417
vdb-entry
x_refsource_BID
236141
vendor-advisory
x_refsource_SUNALERT
DSA-1293
vendor-advisory
x_refsource_DEBIAN
24808
third-party-advisory
x_refsource_SECUNIA
25428
third-party-advisory
x_refsource_SECUNIA
2007-0017
vendor-advisory
x_refsource_TRUSTIX
OpenPKG-SA-2007.015
vendor-advisory
x_refsource_OPENPKG
RHSA-2007:0389
vendor-advisory
x_refsource_REDHAT
SUSE-SR:2007:009
vendor-advisory
x_refsource_SUSE
oval:org.mitre.oval:def:11048
vdb-entry
signature
x_refsource_OVAL
25293
third-party-advisory
x_refsource_SECUNIA
quagga-bgpattributes-dos(33547)
vdb-entry
x_refsource_XF
29743
third-party-advisory
x_refsource_SECUNIA
USN-461-1
vendor-advisory
x_refsource_UBUNTU
MDKSA-2007:096
vendor-advisory
x_refsource_MANDRIVA
25255
third-party-advisory
x_refsource_SECUNIA
GLSA-200705-05
vendor-advisory
x_refsource_GENTOO

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now