Published: 12/09/2007 Updated: 29/07/2017

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

VMScore: 312

Vector: AV:N/AC:M/Au:S/C:N/I:N/A:P

bgpd in Quagga prior to 0.99.9 allows explicitly configured BGP peers to cause a denial of service (crash) via a malformed (1) OPEN message or (2) a COMMUNITY attribute, which triggers a NULL pointer dereference. NOTE: vector 2 only exists when debugging is enabled.

Vulnerable Product	Search on Vulmon	Subscribe to Product
quagga quagga 0.96.2
quagga quagga 0.99.2
quagga quagga 0.96.5
quagga quagga 0.96.1
quagga quagga 0.97.5
quagga quagga 0.98.0
quagga quagga 0.99.6
quagga quagga 0.98.5
quagga quagga 0.99.4
quagga quagga 0.99.7
quagga quagga 0.99.5
quagga quagga 0.97.1
quagga quagga 0.97.2
quagga quagga 0.98.3
quagga quagga 0.98.4
quagga quagga
quagga quagga 0.99.3
quagga quagga 0.95
quagga quagga 0.96
quagga quagga 0.97.0
quagga quagga 0.98.1
quagga quagga 0.98.2
quagga quagga 0.98.6
quagga quagga 0.96.3
quagga quagga 0.99.1
quagga quagga 0.96.4
quagga quagga 0.97.3
quagga quagga 0.97.4

Synopsis Moderate: quagga security update Type/Severity Security Advisory: Moderate Topic Updated quagga packages that fix multiple security issues are now availablefor Red Hat Enterprise Linux 4 and 5The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnera ...

Debian Bug report logs - #442133 CVE-2007-4826 remote denial of service Package: quagga; Maintainer for quagga is Brett Parker <iDunno@sommitrealweirdcouk>; Source for quagga is src:quagga (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: Thu, 13 Sep 2007 12:51:03 UTC Severity: normal Tags: sec ...

It was discovered that Quagga did not correctly verify OPEN messages or COMMUNITY attributes sent from configured peers Malicious authenticated remote peers could send a specially crafted message which would cause bgpd to abort, leading to a denial of service ...

NVD-CWE-noinfo http://quagga.net/news2.php?y=2007&m=9&d=7#id1189190760 http://www.securityfocus.com/bid/25634 http://secunia.com/advisories/26744 http://lists.debian.org/debian-security-announce/debian-security-announce-2007/msg00153.html http://www.quagga.net/download/quagga-0.99.9.changelog.txt http://www.debian.org/security/2007/dsa-1382 http://fedoranews.org/updates/FEDORA-2007-219.shtml http://www.mandriva.com/security/advisories?name=MDKSA-2007:182 http://www.trustix.org/errata/2007/0028/http://www.ubuntu.com/usn/usn-512-1 http://secunia.com/advisories/26829 http://secunia.com/advisories/26863 http://secunia.com/advisories/27049 http://sunsolve.sun.com/search/document.do?assetkey=1-26-236141-1 http://secunia.com/advisories/29743 http://www.redhat.com/support/errata/RHSA-2010-0785.html http://www.vupen.com/english/advisories/2007/3129 http://www.vupen.com/english/advisories/2008/1195/references https://exchange.xforce.ibmcloud.com/vulnerabilities/36551 https://access.redhat.com/errata/RHSA-2010:0785 https://usn.ubuntu.com/512-1/https://nvd.nist.gov

CVE-2007-4826

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect