CVE-2007-4826

Published: Sep 12, 2007Modified: Apr 23, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:N/A:P

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service (crash) via a malformed (1) OPEN message or (2) a COMMUNITY attribute, which triggers a NULL pointer dereference. NOTE: vector 2 only exists when debugging is enabled.

Affected (28)

Products: Quagga: Quagga

1 product

Configuration A

28 vulnerable

Vulnerable Software	Affected Versions
Quagga Quagga	Up to 0.99.8
Quagga Quagga	Version 0.95
Quagga Quagga	Version 0.96.1
Quagga Quagga	Version 0.96.2
Quagga Quagga	Version 0.96.3
Quagga Quagga	Version 0.96.4
Quagga Quagga	Version 0.96.5
Quagga Quagga	Version 0.96
Quagga Quagga	Version 0.97.0
Quagga Quagga	Version 0.97.1
Quagga Quagga	Version 0.97.2
Quagga Quagga	Version 0.97.3
Quagga Quagga	Version 0.97.4
Quagga Quagga	Version 0.97.5
Quagga Quagga	Version 0.98.0
Quagga Quagga	Version 0.98.1
Quagga Quagga	Version 0.98.2
Quagga Quagga	Version 0.98.3
Quagga Quagga	Version 0.98.4
Quagga Quagga	Version 0.98.5
Quagga Quagga	Version 0.98.6
Quagga Quagga	Version 0.99.1
Quagga Quagga	Version 0.99.2
Quagga Quagga	Version 0.99.3
Quagga Quagga	Version 0.99.4
Quagga Quagga	Version 0.99.5
Quagga Quagga	Version 0.99.6
Quagga Quagga	Version 0.99.7

References (38)

http://fedoranews.org/updates/FEDORA-2007-219.shtml

Source: secalert@redhat.com

http://lists.debian.org/debian-security-announce/debian-security-announce-2007/msg00153.html

Source: secalert@redhat.com

http://quagga.net/news2.php?y=2007&m=9&d=7#id1189190760

Source: secalert@redhat.com

Patch

http://secunia.com/advisories/26744

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/26829

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/26863

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27049

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29743

Source: secalert@redhat.com

Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-236141-1

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1382

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:182

Source: secalert@redhat.com

http://www.quagga.net/download/quagga-0.99.9.changelog.txt

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2010-0785.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/25634

Source: secalert@redhat.com

Patch

http://www.trustix.org/errata/2007/0028/

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-512-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/3129

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2008/1195/references

Source: secalert@redhat.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/36551

Source: secalert@redhat.com

http://fedoranews.org/updates/FEDORA-2007-219.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.debian.org/debian-security-announce/debian-security-announce-2007/msg00153.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://quagga.net/news2.php?y=2007&m=9&d=7#id1189190760

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://secunia.com/advisories/26744

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/26829

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/26863

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/27049

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/29743

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-236141-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2007/dsa-1382

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2007:182

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.quagga.net/download/quagga-0.99.9.changelog.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2010-0785.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/25634

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.trustix.org/errata/2007/0028/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-512-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/3129

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2008/1195/references

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/36551

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.