Red Hat Security AdvisoryRHSA-2011:0406
quagga security update
Released 2011-03-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 6) quagga-0.99.15-5.el6_0.2
- Red Hat Enterprise Linux Server Optional (v. 6) quagga-0.99.15-5.el6_0.2, quagga-contrib-0.99.15-5.el6_0.2, quagga-devel-0.99.15-5.el6_0.2 +1
- Red Hat Enterprise Linux Workstation (v. 6) quagga-0.99.15-5.el6_0.2
- Red Hat Enterprise Linux Workstation Optional (v. 6) quagga-0.99.15-5.el6_0.2, quagga-contrib-0.99.15-5.el6_0.2, quagga-devel-0.99.15-5.el6_0.2
Fixes 2 records
Priority LOW 38
The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed Extended Communities attribute.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.13426 · Published 2011-03-29 · Partial fix
Priority LOW 29
bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (session reset) via a malformed AS_PATHLIMIT path attribute.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03352 · Published 2011-03-29 · Fixed CWE-399
