CVE-2007-1995

Published: Apr 12, 2007Modified: Apr 23, 2026

6.3

Vector

AV:N/AC:M/Au:S/C:N/I:N/A:C

Exploitability: 6.8 / Impact: 6.9

Source: NVD

Description

bgpd/bgp_attr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not validate length values in the MP_REACH_NLRI and MP_UNREACH_NLRI attributes, which allows remote attackers to cause a denial of service (daemon crash or exit) via crafted UPDATE messages that trigger an assertion error or out of bounds read.

Affected (20)

Products: Quagga: Quagga

Quagga

1 product

Quagga

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Quagga Quagga	Up to 0.98.6
Quagga Quagga	Version 0.95
Quagga Quagga	Version 0.96.1
Quagga Quagga	Version 0.96.2
Quagga Quagga	Version 0.96.3
Quagga Quagga	Version 0.96.4
Quagga Quagga	Version 0.96.5
Quagga Quagga	Version 0.96
Quagga Quagga	Version 0.97.0
Quagga Quagga	Version 0.97.1
Quagga Quagga	Version 0.97.2
Quagga Quagga	Version 0.97.3
Quagga Quagga	Version 0.97.4
Quagga Quagga	Version 0.97.5
Quagga Quagga	Version 0.98.0
Quagga Quagga	Version 0.98.1
Quagga Quagga	Version 0.98.2
Quagga Quagga	Version 0.98.3
Quagga Quagga	Version 0.98.4
Quagga Quagga	Version 0.98.5

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (52)

http://bugzilla.quagga.net/show_bug.cgi?id=354

Source: cve@mitre.org

http://bugzilla.quagga.net/show_bug.cgi?id=355

Source: cve@mitre.org

http://secunia.com/advisories/24808

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/25084

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/25119

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/25255

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/25293

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/25312

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/25428

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29743

Source: cve@mitre.org

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200705-05.xml

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-236141-1

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1293

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:096

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2007_9_sr.html

Source: cve@mitre.org

http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.015.html

Source: cve@mitre.org

http://www.quagga.net/news2.php?y=2007&m=4&d=8#id1176073740

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0389.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/23417

Source: cve@mitre.org

http://www.securitytracker.com/id?1018142

Source: cve@mitre.org

http://www.trustix.org/errata/2007/0017/

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-461-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1336

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2008/1195/references

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/33547

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11048

Source: cve@mitre.org

http://bugzilla.quagga.net/show_bug.cgi?id=354