Published: 29/03/2011 Updated: 06/01/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The extended-community parser in bgpd in Quagga prior to 0.99.18 allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via a malformed Extended Communities attribute.

Vulnerable Product	Search on Vulmon	Subscribe to Product
quagga quagga 0.99.6
quagga quagga 0.98.5
quagga quagga 0.99.8
quagga quagga 0.99.2
quagga quagga
quagga quagga 0.99.5
quagga quagga 0.99.1
quagga quagga 0.97.1
quagga quagga 0.97.2
quagga quagga 0.98.3
quagga quagga 0.98.4
quagga quagga 0.99.12
quagga quagga 0.99.4
quagga quagga 0.99.15
quagga quagga 0.99.3
quagga quagga 0.99.9
quagga quagga 0.96.4
quagga quagga 0.97.3
quagga quagga 0.97.4
quagga quagga 0.99.10
quagga quagga 0.99.14
quagga quagga 0.96.2
quagga quagga 0.99.13
quagga quagga 0.99.7
quagga quagga 0.99.11
quagga quagga 0.96
quagga quagga 0.97.0
quagga quagga 0.98.1
quagga quagga 0.98.2
quagga quagga 0.98.6
quagga quagga 0.96.3
quagga quagga 0.99.16
quagga quagga 0.95
quagga quagga 0.96.5
quagga quagga 0.96.1
quagga quagga 0.97.5
quagga quagga 0.98.0

Synopsis Moderate: quagga security update Type/Severity Security Advisory: Moderate Topic Updated quagga packages that fix multiple security issues are now availablefor Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerability ...

An attacker could send crafted input to Quagga and cause it to crash ...

It has been discovered that the Quagga routing daemon contains two denial-of-service vulnerabilities in its BGP implementation: CVE-2010-1674 A crafted Extended Communities attribute triggers a NULL pointer dereference which causes the BGP daemon to crash The crafted attributes are not propagated by the Internet core, so only expl ...

NVD-CWE-Other http://www.vupen.com/english/advisories/2011/0711 http://secunia.com/advisories/43499 https://bugzilla.redhat.com/show_bug.cgi?id=654603 http://www.debian.org/security/2011/dsa-2197 http://www.securityfocus.com/bid/46942 http://secunia.com/advisories/43770 http://www.quagga.net/news2.php?y=2011&m=3&d=21#id1300723200 http://www.osvdb.org/71259 http://www.mandriva.com/security/advisories?name=MDVSA-2011:058 http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html http://rhn.redhat.com/errata/RHSA-2012-1258.html http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html https://exchange.xforce.ibmcloud.com/vulnerabilities/66211 http://security.gentoo.org/glsa/glsa-201202-02.xml http://secunia.com/advisories/48106 https://access.redhat.com/errata/RHSA-2012:1258 https://usn.ubuntu.com/1095-1/https://nvd.nist.gov

CVE-2010-1674

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect