Published: 23/05/2016 Updated: 30/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which might allow remote malicious users to cause a denial of service (assertion failure and daemon crash) via a large BGP packet.

Vulnerable Product	Search on Vulmon	Subscribe to Product
quagga quagga -
opensuse leap 42.1
opensuse opensuse 13.2

Synopsis Moderate: quagga security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for quagga is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base ...

Several security issues were fixed in Quagga ...

Debian Bug report logs - #822787 quagga: CVE-2016-4049: Missing size check in bgp_dump_routes_func in bgpd/bgp_dumpc allowing DoS Package: src:quagga; Maintainer for src:quagga is Brett Parker <iDunno@sommitrealweirdcouk>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 27 Apr 2016 14:06:02 UTC Se ...

Debian Bug report logs - #835223 quagga: CVE-2016-4036 Package: src:quagga; Maintainer for src:quagga is Brett Parker <iDunno@sommitrealweirdcouk>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 23 Aug 2016 16:30:10 UTC Severity: important Tags: security Found in versions quagga/099224-1, quag ...

Two vulnerabilities were discovered in quagga, a BGP/OSPF/RIP routing daemon CVE-2016-4036 Tamás Németh discovered that sensitive configuration files in /etc/quagga were world-readable despite containing sensitive information CVE-2016-4049 Evgeny Uskov discovered that a bgpd instance handling many peers could be cras ...

A denial of service flaw was found in the Quagga BGP routing daemon (bgpd) Under certain circumstances, a remote attacker could send a crafted packet to crash the bgpd daemon resulting in denial of service ...

CWE-20 http://www.openwall.com/lists/oss-security/2016/04/27/7 http://lists.opensuse.org/opensuse-updates/2016-05/msg00062.html http://www.securitytracker.com/id/1035699 https://lists.quagga.net/pipermail/quagga-dev/2016-February/014743.html https://lists.quagga.net/pipermail/quagga-dev/2016-January/014699.html http://www.debian.org/security/2016/dsa-3654 http://www.securityfocus.com/bid/88561 https://security.gentoo.org/glsa/201701-48 http://rhn.redhat.com/errata/RHSA-2017-0794.html https://access.redhat.com/errata/RHSA-2017:0794 https://usn.ubuntu.com/3102-1/https://nvd.nist.gov

CVE-2016-4049

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect