CVE

Id
25352  
CVE No.
CVE-2007-1995  
Status
Candidate  
Description
bgpd/bgp_attr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not validate length values in the MP_REACH_NLRI and MP_UNREACH_NLRI attributes, which allows remote attackers to cause a denial of service (daemon crash or exit) via crafted UPDATE messages that trigger an assertion error or out of bounds read.  
Phase
Assigned (20070411)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
252769 25352 CVE-2007-1995 CONFIRM:http://bugzilla.quagga.net/show_bug.cgi?id=354  View
252770 25352 CVE-2007-1995 CONFIRM:http://bugzilla.quagga.net/show_bug.cgi?id=355  View
252771 25352 CVE-2007-1995 CONFIRM:http://www.quagga.net/news2.php?y=2007&m=4&d=8#id1176073740  View
252772 25352 CVE-2007-1995 DEBIAN:DSA-1293  View
252773 25352 CVE-2007-1995 URL:http://www.debian.org/security/2007/dsa-1293  View
252774 25352 CVE-2007-1995 GENTOO:GLSA-200705-05  View
252775 25352 CVE-2007-1995 URL:http://security.gentoo.org/glsa/glsa-200705-05.xml  View
252776 25352 CVE-2007-1995 MANDRIVA:MDKSA-2007:096  View
252777 25352 CVE-2007-1995 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:096  View
252778 25352 CVE-2007-1995 OPENPKG:OpenPKG-SA-2007.015  View
252779 25352 CVE-2007-1995 URL:http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.015.html  View
252780 25352 CVE-2007-1995 REDHAT:RHSA-2007:0389  View
252781 25352 CVE-2007-1995 URL:http://www.redhat.com/support/errata/RHSA-2007-0389.html  View
252782 25352 CVE-2007-1995 SUNALERT:236141  View
252783 25352 CVE-2007-1995 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-236141-1  View
252784 25352 CVE-2007-1995 SUSE:SUSE-SR:2007:009  View
252785 25352 CVE-2007-1995 URL:http://www.novell.com/linux/security/advisories/2007_9_sr.html  View
252786 25352 CVE-2007-1995 TRUSTIX:2007-0017  View
252787 25352 CVE-2007-1995 URL:http://www.trustix.org/errata/2007/0017/  View
252788 25352 CVE-2007-1995 UBUNTU:USN-461-1  View
252789 25352 CVE-2007-1995 URL:http://www.ubuntu.com/usn/usn-461-1  View
252790 25352 CVE-2007-1995 BID:23417  View
252791 25352 CVE-2007-1995 URL:http://www.securityfocus.com/bid/23417  View
252792 25352 CVE-2007-1995 OVAL:oval:org.mitre.oval:def:11048  View
252793 25352 CVE-2007-1995 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11048  View
252794 25352 CVE-2007-1995 VUPEN:ADV-2007-1336  View
252795 25352 CVE-2007-1995 URL:http://www.vupen.com/english/advisories/2007/1336  View
252796 25352 CVE-2007-1995 VUPEN:ADV-2008-1195  View
252797 25352 CVE-2007-1995 URL:http://www.vupen.com/english/advisories/2008/1195/references  View
252798 25352 CVE-2007-1995 SECTRACK:1018142  View
252799 25352 CVE-2007-1995 URL:http://www.securitytracker.com/id?1018142  View
252800 25352 CVE-2007-1995 SECUNIA:24808  View
252801 25352 CVE-2007-1995 URL:http://secunia.com/advisories/24808  View
252802 25352 CVE-2007-1995 SECUNIA:25084  View
252803 25352 CVE-2007-1995 URL:http://secunia.com/advisories/25084  View
252804 25352 CVE-2007-1995 SECUNIA:25119  View
252805 25352 CVE-2007-1995 URL:http://secunia.com/advisories/25119  View
252806 25352 CVE-2007-1995 SECUNIA:25255  View
252807 25352 CVE-2007-1995 URL:http://secunia.com/advisories/25255  View
252808 25352 CVE-2007-1995 SECUNIA:25312  View
252809 25352 CVE-2007-1995 URL:http://secunia.com/advisories/25312  View
252810 25352 CVE-2007-1995 SECUNIA:25293  View
252811 25352 CVE-2007-1995 URL:http://secunia.com/advisories/25293  View
252812 25352 CVE-2007-1995 SECUNIA:25428  View
252813 25352 CVE-2007-1995 URL:http://secunia.com/advisories/25428  View
252814 25352 CVE-2007-1995 SECUNIA:29743  View
252815 25352 CVE-2007-1995 URL:http://secunia.com/advisories/29743  View
252816 25352 CVE-2007-1995 XF:quagga-bgpattributes-dos(33547)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52454 JVNDB-2007-001146 ClamAV の cab_unstore() 関数および cab_extract() 関数におけるバッファオーバーフローの脆弱性 ClamAV の libclamav/cab.c には、cab_unstore() 関数および cab_extract() 関数において、負の整数を含む CHM ファイルの取り扱いに不備があり、整数符号のエラーにより、スタックベースのバッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-1997 25352 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001146.html  View