| Package | Affected versions | Patched versions |
|---|---|---|
| quagga | = 0.95= 0.96= 0.96.1= 0.96.2= 0.96.3= 0.96.4= 0.96.5= 0.97.0= 0.97.1= 0.97.2= 0.97.3= 0.97.4= 0.97.5= 0.98.0= 0.98.1= 0.98.2= 0.98.3= 0.98.4= 0.98.5= 0.98.6= 0.99.1= 0.99.10= 0.99.11= 0.99.12= 0.99.13= 0.99.14= 0.99.15= 0.99.16= 0.99.17= 0.99.18= 0.99.19= 0.99.2= 0.99.3= 0.99.4= 0.99.5= 0.99.6= 0.99.7= 0.99.8= 0.99.9≤ 0.99.20 |
The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a message associated with a malformed Four-octet AS Number Capability (aka AS4 capability).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free