CVE-2013-6051

Published: 14/12/2013 Updated: 07/11/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

The bgp_attr_unknown function in bgp_attr.c in Quagga 0.99.21 does not properly initialize the total variable, which allows remote malicious users to cause a denial of service (bgpd crash) via a crafted BGP update.

Vulnerable Product	Search on Vulmon	Subscribe to Product
quagga quagga 0.99.21

Debian Bug report logs - #726724 quagga: CVE-2013-2236 Package: quagga; Maintainer for quagga is Brett Parker <iDunno@sommitrealweirdcouk>; Source for quagga is src:quagga (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Fri, 18 Oct 2013 13:03:01 UTC Severity: grave Tags: patch, securit ...

Debian Bug report logs - #730513 CVE-2013-6051 - bgpd crash on valid BGP updates Package: quagga; Maintainer for quagga is Brett Parker <iDunno@sommitrealweirdcouk>; Source for quagga is src:quagga (PTS, buildd, popcon) Reported by: Christian Hammers <ch@debianorg> Date: Mon, 25 Nov 2013 23:54:02 UTC Severity: gr ...

Multiple vulnerabilities were discovered in Quagga, a BGP/OSPF/RIP routing daemon: CVE-2013-2236 A buffer overflow was found in the OSPF API-server (exporting the LSDB and allowing announcement of Opaque-LSAs) CVE-2013-6051 bgpd could be crashed through BGP updates This only affects Wheezy/stable For the oldstable distribution (squ ...

The bgp_attr_unknown function in bgp_attrc in Quagga 09921 does not properly initialize the total variable, which allows remote attackers to cause a denial of service (bgpd crash) via a crafted BGP update ...

NVD-CWE-noinfo http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730513 http://www.debian.org/security/2013/dsa-2803 http://git.savannah.gnu.org/gitweb/?p=quagga.git%3Ba=commitdiff%3Bh=8794e8d229dc9fe29ea31424883433d4880ef408 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726724 https://www.debian.org/security/./dsa-2803

CVE-2013-6051

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect