Vulnerability in Quagga

CVE-2007-4826

bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service (crash) via a malformed (1) OPEN message or (2) a COMMUNITY attribute, which triggers a NULL pointer dereference. NOTE: vector 2 only exists when debugging is enabled.

EPSS: 0.017 (74.7th percentile) — read the EPSS interpretation.

Affected products

  • Quagga — versions 0.95, 0.96, 0.96.1
  • N/a — versions n/a

References