PT-2007-1066 · Quagga+1 · Quagga+1

Published 2007-04-12 · Updated 2024-06-15 · CVE-2007-1995

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Medium

Base vector

AV:N/AC:M/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Quagga versions 0.98.6 and earlier Quagga versions 0.99.6 and earlier

Description: The issue allows remote attackers to cause a denial of service, potentially leading to a daemon crash or exit, by sending crafted UPDATE messages that trigger an assertion error or out of bounds read. This is due to the lack of validation of length values in the MP REACH NLRI and MP UNREACH NLRI attributes. The vulnerability can be exploited remotely by an attacker who has passed the authentication procedure, leading to a disruption of protected information availability.

Recommendations: For Quagga versions 0.98.6 and earlier: update to a version later than 0.98.6 to resolve the issue. For Quagga versions 0.99.6 and earlier: update to a version later than 0.99.6 to resolve the issue. As a temporary workaround, consider restricting access to the bgpd/bgp attr.c module until a patch is available.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2015-07080

BDU:2015-09565

CVE-2007-1995

DSA-1293-1

OPENSUSE-SU-2024:11290-1

RHSA-2007:0389

RHSA-2007_0389

Affected Products

Quagga

Red Hat

References · 46

• http://security.gentoo.org/glsa/glsa-200705-05.xml · Vendor Advisory
• http://secunia.com/advisories/25084 · Vendor Advisory
• http://vupen.com/english/advisories/2007/1336 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0389.html · Vendor Advisory
• http://secunia.com/advisories/24808 · Vendor Advisory
• http://secunia.com/advisories/29743 · Vendor Advisory
• http://secunia.com/advisories/25312 · Vendor Advisory
• http://debian.org/security/2007/dsa-1293 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2007:096 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-236141-1 · Vendor Advisory
• http://novell.com/linux/security/advisories/2007_9_sr.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-1995 · Vendor Advisory
• http://ubuntu.com/usn/usn-461-1 · Vendor Advisory
• http://secunia.com/advisories/25293 · Vendor Advisory
• http://secunia.com/advisories/25119 · Vendor Advisory