NVD

Id
54165  
Name
CVE-2007-1995  
Description
bgpd/bgp_attr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not validate length values in the MP_REACH_NLRI and MP_UNREACH_NLRI attributes, which allows remote attackers to cause a denial of service (daemon crash or exit) via crafted UPDATE messages that trigger an assertion error or out of bounds read.  
Reject
 
CVSS Version
2  
CVSS Score
6.3  
Severity
Medium  
CVSS Base Score
6.3  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2007-04-12  
Modified Date
2011-03-31  
Seq
2007-1995  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
274656 54165 CVE-2007-1995 http://bugzilla.quagga.net/show_bug.cgi?id=354  View
274657 54165 CVE-2007-1995 http://bugzilla.quagga.net/show_bug.cgi?id=355  View
274658 54165 CVE-2007-1995 oval:org.mitre.oval:def:11048  View
274659 54165 CVE-2007-1995 GLSA-200705-05  View
274660 54165 CVE-2007-1995 236141  View
274661 54165 CVE-2007-1995 DSA-1293  View
274662 54165 CVE-2007-1995 MDKSA-2007:096  View
274663 54165 CVE-2007-1995 SUSE-SR:2007:009  View
274664 54165 CVE-2007-1995 OpenPKG-SA-2007.015  View
274665 54165 CVE-2007-1995 http://www.quagga.net/news2.php?y=2007&m=4&d=8#id1176073740  View
274666 54165 CVE-2007-1995 RHSA-2007:0389  View
274667 54165 CVE-2007-1995 23417  View
274668 54165 CVE-2007-1995 1018142  View
274669 54165 CVE-2007-1995 2007-0017  View
274670 54165 CVE-2007-1995 USN-461-1  View
274671 54165 CVE-2007-1995 ADV-2007-1336  View
274672 54165 CVE-2007-1995 ADV-2008-1195  View
274673 54165 CVE-2007-1995 quagga-bgpattributes-dos(33547)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51756 JVNDB-2007-000419 Quagga の UPDATE メッセージ処理におけるサービス運用妨害 (DoS) の脆弱性 ルーティングソフトウェアスイートである Quagga の /gpd/pgp_attr.c には、UPDATE メッセージ中の MP_REACH_NLRI および MP_UNREACH_NLRI 属性における値の長さを適切に検査しないため、アサーションエラーの発生によりサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2007-1995 25350 CVE-2007-1995 54165 6.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000419.html 2007-04-12 2008-10-30 View