Improper input validation in Quagga

CVE-2007-1995

bgpd/bgp_attr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not validate length values in the MP_REACH_NLRI and MP_UNREACH_NLRI attributes, which allows remote attackers to cause a denial of service (daemon crash or exit) via crafted UPDATE messages that trigger an assertion error or out of bounds read.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.017 (75.4th percentile) — read the EPSS interpretation.

Affected products

  • Quagga — versions 0.95, 0.96, 0.96.1
  • N/a — versions n/a

Weakness classification (CWE)

References