| Package | Affected versions | Patched versions |
|---|---|---|
| quagga | = 0.95= 0.96= 0.96.1= 0.96.2= 0.96.3= 0.96.4= 0.96.5= 0.97.0= 0.97.1= 0.97.2= 0.97.3= 0.97.4= 0.97.5= 0.98.0= 0.98.1= 0.98.2= 0.98.3= 0.98.4= 0.98.5= 0.98.6= 0.99.1= 0.99.10= 0.99.11= 0.99.12= 0.99.13= 0.99.14= 0.99.15= 0.99.16= 0.99.2= 0.99.3= 0.99.4= 0.99.5= 0.99.6= 0.99.7= 0.99.8= 0.99.9≤ 0.99.17 |
The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed Extended Communities attribute.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free