Red Hat Security AdvisoryRHSA-2010:0785
quagga security update
Released 2010-10-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) quagga-0.98.6-5.el5_5.2, quagga-0.98.6-5.el5_5.2.i386, quagga-0.98.6-5.el5_5.2.ia64 +9
- Red Hat Enterprise Linux AS version 4 quagga-0.98.3-4.el4_8.1, quagga-0.98.3-4.el4_8.1.i386, quagga-0.98.3-4.el4_8.1.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) quagga-0.98.6-5.el5_5.2, quagga-contrib-0.98.6-5.el5_5.2, quagga-contrib-0.98.6-5.el5_5.2.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) quagga-0.98.6-5.el5_5.2, quagga-0.98.6-5.el5_5.2.i386, quagga-devel-0.98.6-5.el5_5.2 +1
- Red Hat Enterprise Linux Desktop version 4 quagga-0.98.3-4.el4_8.1, quagga-0.98.3-4.el4_8.1.i386, quagga-contrib-0.98.3-4.el4_8.1 +3
- Red Hat Enterprise Linux ES version 4 quagga-0.98.3-4.el4_8.1, quagga-0.98.3-4.el4_8.1.i386, quagga-0.98.3-4.el4_8.1.ia64 +6
- Red Hat Enterprise Linux WS version 4 quagga-0.98.3-4.el4_8.1, quagga-0.98.3-4.el4_8.1.i386, quagga-0.98.3-4.el4_8.1.ia64 +6
Fixes 2 records
Priority LOW 36
Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arb…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.04041 · Published 2010-09-10 · Fixed CWE-119
Priority LOW 20
bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service (crash) via a malformed (1) OPEN message or (2) a COMMUNITY attribute, which triggers a NULL pointer dereference.
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.01687 · Published 2007-09-12 · Fixed
