NVD

Id
18577  
Name
CVE-2016-2342  
Description
The bgp_nlri_parse_vpnv4 function in bgp_mplsvpn.c in the VPNv4 NLRI parser in bgpd in Quagga before 1.0.20160309, when a certain VPNv4 configuration is used, relies on a Labeled-VPN SAFI routes-data length field during a data copy, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted packet.  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-03-17  
Modified Date
2016-12-02  
Seq
2016-2342  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
103017 18577 CVE-2016-2342 http://git.savannah.gnu.org/cgit/quagga.git/commit/?id=a3bc7e9400b214a0f078fdb19596ba54214a1442  View
103018 18577 CVE-2016-2342 openSUSE-SU-2016:0863  View
103019 18577 CVE-2016-2342 openSUSE-SU-2016:0888  View
103020 18577 CVE-2016-2342 http://nongnu.askapache.com//quagga/quagga-1.0.20160309.changelog.txt  View
103021 18577 CVE-2016-2342 DSA-3532  View
103022 18577 CVE-2016-2342 VU#270232  View
103023 18577 CVE-2016-2342 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
103024 18577 CVE-2016-2342 84318  View
103025 18577 CVE-2016-2342 USN-2941-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
918 JVNDB-2016-001691 Quagga にバッファオーバーフローの脆弱性 Quagga バージョン 0.99.24.1 およびそれ以前のバージョンには、VPNv4 を有効にした、BGP ピアを設定した bgpd にバッファオーバーフローの脆弱性が存在し、任意のコードを実行される可能性があります。 CVE-2016-2342 88848 CVE-2016-2342 18577 7.6 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001691.html 2016-03-10 2016-03-23 View