PT-2011-5220 · Quagga+2 · Quagga-Devel+5

Jukka Taimisto + 2 · Published 1970-01-01 · Updated 2018-01-06 · CVE-2011-3327

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Quagga versions prior to 0.99.19 Quagga-devel versions prior to 0.99.19 Quagga-contrib versions prior to 0.99.19 Quagga-debuginfo versions prior to 0.99.19

Description The issue is related to multiple vulnerabilities in the Quagga package, which can lead to disruption of confidentiality, integrity, and availability of protected information. Exploitation of these vulnerabilities can be done remotely. A heap-based buffer overflow in the ecommunity ecom2str function in bgp ecommunity.c in bgpd in Quagga before version 0.99.19 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by sending a crafted BGP UPDATE message over IPv4.

Recommendations For Quagga versions prior to 0.99.19, update to version 0.99.19 or later. For Quagga-devel versions prior to 0.99.19, update to version 0.99.19 or later. For Quagga-contrib versions prior to 0.99.19, update to version 0.99.19 or later. For Quagga-debuginfo versions prior to 0.99.19, update to version 0.99.19 or later. As a temporary workaround, consider restricting access to the bgpd service until a patch is available. Avoid using the ecommunity ecom2str function in the affected bgp ecommunity.c file until the issue is resolved.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2015-04429

BDU:2015-04430

BDU:2015-05387

BDU:2015-05388

BDU:2015-06496

BDU:2015-06499

BDU:2015-06500

BDU:2015-06503

BDU:2015-08791

BDU:2015-08792

BDU:2015-08793

BDU:2015-08794

BDU:2015-09430

CESA-2012_1259

CVE-2011-3327

DSA-2316-1

RHSA-2012:1258

RHSA-2012:1259

RHSA-2012_1258

RHSA-2012_1259

Affected Products

Centos

Quagga

Quagga-Contrib

Quagga-Debuginfo

Quagga-Devel

Red Hat

References · 60

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0255 · Security Note
• https://bdu.fstec.ru/vul/2015-09708 · Security Note
• https://bdu.fstec.ru/vul/2015-08794 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0250 · Security Note
• https://bdu.fstec.ru/vul/2015-08791 · Security Note
• https://bdu.fstec.ru/vul/2015-08792 · Security Note
• https://bdu.fstec.ru/vul/2015-06499 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00007.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00027.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3327 · Security Note
• http://secunia.com/advisories/46139 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05387 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1820 · Security Note
• https://bdu.fstec.ru/vul/2015-08793 · Security Note
• http://security.gentoo.org/glsa/glsa-201202-02.xml · Vendor Advisory