CVE-2009-1572

Published: May 6, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error.

Affected (31)

Products: Quagga: Quagga

1 product

Configuration A

31 vulnerable

Vulnerable Software	Affected Versions
Quagga Quagga	Up to 0.99.11
Quagga Quagga	Version 0.95
Quagga Quagga	Version 0.96.1
Quagga Quagga	Version 0.96.2
Quagga Quagga	Version 0.96.3
Quagga Quagga	Version 0.96.4
Quagga Quagga	Version 0.96.5
Quagga Quagga	Version 0.96
Quagga Quagga	Version 0.97.0
Quagga Quagga	Version 0.97.1
Quagga Quagga	Version 0.97.2
Quagga Quagga	Version 0.97.3
Quagga Quagga	Version 0.97.4
Quagga Quagga	Version 0.97.5
Quagga Quagga	Version 0.98.0
Quagga Quagga	Version 0.98.1
Quagga Quagga	Version 0.98.2
Quagga Quagga	Version 0.98.3
Quagga Quagga	Version 0.98.4
Quagga Quagga	Version 0.98.5
Quagga Quagga	Version 0.98.6
Quagga Quagga	Version 0.99.10
Quagga Quagga	Version 0.99.1
Quagga Quagga	Version 0.99.2
Quagga Quagga	Version 0.99.3
Quagga Quagga	Version 0.99.4
Quagga Quagga	Version 0.99.5
Quagga Quagga	Version 0.99.6
Quagga Quagga	Version 0.99.7
Quagga Quagga	Version 0.99.8
Quagga Quagga	Version 0.99.9

References (38)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526311

Source: cve@mitre.org

ExploitPatch

http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html

Source: cve@mitre.org

http://marc.info/?l=quagga-dev&m=123364779626078&w=2

Source: cve@mitre.org

ExploitPatch

http://secunia.com/advisories/34999

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35061

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35203

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35685

Source: cve@mitre.org

Vendor Advisory

http://thread.gmane.org/gmane.network.quagga.devel/6513

Source: cve@mitre.org

Exploit

http://www.debian.org/security/2009/dsa-1788

Source: cve@mitre.org

Patch

http://www.mandriva.com/security/advisories?name=MDVSA-2009:109

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2009/05/01/1

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2009/05/01/2

Source: cve@mitre.org

http://www.osvdb.org/54200

Source: cve@mitre.org

http://www.securityfocus.com/bid/34817

Source: cve@mitre.org

http://www.securitytracker.com/id?1022164

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-775-1

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/50317

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01037.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01107.html

Source: cve@mitre.org

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526311

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=quagga-dev&m=123364779626078&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://secunia.com/advisories/34999

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/35061

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/35203

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/35685

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://thread.gmane.org/gmane.network.quagga.devel/6513

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.debian.org/security/2009/dsa-1788

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.mandriva.com/security/advisories?name=MDVSA-2009:109

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2009/05/01/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2009/05/01/2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/54200

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/34817

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1022164

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-775-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/50317

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01037.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01107.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.