Red Hat Security AdvisoryRHSA-2007:0389
quagga security update
Released 2007-05-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) quagga-0.98.6-2.1.0.1.el5, quagga-0.98.6-2.1.0.1.el5.i386, quagga-0.98.6-2.1.0.1.el5.ia64 +9
- Red Hat Enterprise Linux AS version 3 quagga-0.96.2-12.3E, quagga-0.96.2-12.3E.i386, quagga-0.96.2-12.3E.ia64 +1
- Red Hat Enterprise Linux AS version 4 quagga-0.98.3-2.4.0.1.el4, quagga-0.98.3-2.4.0.1.el4.i386, quagga-0.98.3-2.4.0.1.el4.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) quagga-0.98.6-2.1.0.1.el5, quagga-contrib-0.98.6-2.1.0.1.el5, quagga-contrib-0.98.6-2.1.0.1.el5.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) quagga-0.98.6-2.1.0.1.el5, quagga-0.98.6-2.1.0.1.el5.i386, quagga-devel-0.98.6-2.1.0.1.el5 +1
- Red Hat Enterprise Linux Desktop version 4 quagga-0.98.3-2.4.0.1.el4, quagga-0.98.3-2.4.0.1.el4.i386, quagga-contrib-0.98.3-2.4.0.1.el4 +3
- Red Hat Enterprise Linux ES version 3 quagga-0.96.2-12.3E, quagga-0.96.2-12.3E.i386, quagga-0.96.2-12.3E.ia64
- Red Hat Enterprise Linux ES version 4 quagga-0.98.3-2.4.0.1.el4, quagga-0.98.3-2.4.0.1.el4.i386, quagga-0.98.3-2.4.0.1.el4.ia64 +6
- Red Hat Enterprise Linux WS version 4 quagga-0.98.3-2.4.0.1.el4, quagga-0.98.3-2.4.0.1.el4.i386, quagga-0.98.3-2.4.0.1.el4.ia64 +6
Fixes 1 record
Priority LOW 32
bgpd/bgp_attr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not validate length values in the MP_REACH_NLRI and MP_UNREACH_NLRI attributes, which allows remote attackers to cause a denial of…
CVSS 2.0MEDIUM 6.3· Network · Low privileges · Interaction — · EPSS 0.0174 · Published 2007-04-12 · Fixed CWE-20
