CVE

Id
90868  
CVE No.
CVE-2016-4049  
Status
Candidate  
Description
The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of service (assertion failure and daemon crash) via a large BGP packet.  
Phase
Assigned (20160420)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
782028 90868 CVE-2016-4049 MLIST:[oss-security] 20160427 CVE-2016-4049: Denial of Service Vulnerability in Quagga BGP Routing Daemon (bgpd)  View
782029 90868 CVE-2016-4049 URL:http://www.openwall.com/lists/oss-security/2016/04/27/7  View
782030 90868 CVE-2016-4049 MLIST:[quagga-dev] 20160125 [quagga-dev 14619] SIGABRT while dumping BGP routes (bgpd)  View
782031 90868 CVE-2016-4049 URL:https://lists.quagga.net/pipermail/quagga-dev/2016-January/014699.html  View
782032 90868 CVE-2016-4049 MLIST:[quagga-dev] 20160203 [quagga-dev 14663] Re: SIGABRT while dumping BGP routes (bgpd)  View
782033 90868 CVE-2016-4049 URL:https://lists.quagga.net/pipermail/quagga-dev/2016-February/014743.html  View
782034 90868 CVE-2016-4049 DEBIAN:DSA-3654  View
782035 90868 CVE-2016-4049 URL:http://www.debian.org/security/2016/dsa-3654  View
782036 90868 CVE-2016-4049 SUSE:openSUSE-SU-2016:1313  View
782037 90868 CVE-2016-4049 URL:http://lists.opensuse.org/opensuse-updates/2016-05/msg00062.html  View
782038 90868 CVE-2016-4049 BID:88561  View
782039 90868 CVE-2016-4049 URL:http://www.securityfocus.com/bid/88561  View
782040 90868 CVE-2016-4049 SECTRACK:1035699  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
2280 JVNDB-2016-003053 HPE Insight Control サーバ配備における重要な情報を取得される脆弱性 HPE Insight Control サーバ配備には、重要な情報を取得される、またはデータを変更される脆弱性が存在します。 CVE-2016-4362 90868 5.5 8.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003053.html  View