CVE-2010-2948

Published: Sep 10, 2010Modified: Apr 29, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a malformed Outbound Route Filtering (ORF) record in a BGP ROUTE-REFRESH (RR) message.

Affected (36)

Products: Quagga: Quagga

1 product

Configuration A

36 vulnerable

Vulnerable Software	Affected Versions
Quagga Quagga	Up to 0.99.16
Quagga Quagga	Version 0.95
Quagga Quagga	Version 0.96.1
Quagga Quagga	Version 0.96.2
Quagga Quagga	Version 0.96.3
Quagga Quagga	Version 0.96.4
Quagga Quagga	Version 0.96.5
Quagga Quagga	Version 0.96
Quagga Quagga	Version 0.97.0
Quagga Quagga	Version 0.97.1
Quagga Quagga	Version 0.97.2
Quagga Quagga	Version 0.97.3
Quagga Quagga	Version 0.97.4
Quagga Quagga	Version 0.97.5
Quagga Quagga	Version 0.98.0
Quagga Quagga	Version 0.98.1
Quagga Quagga	Version 0.98.2
Quagga Quagga	Version 0.98.3
Quagga Quagga	Version 0.98.4
Quagga Quagga	Version 0.98.5
Quagga Quagga	Version 0.98.6
Quagga Quagga	Version 0.99.10
Quagga Quagga	Version 0.99.11
Quagga Quagga	Version 0.99.12
Quagga Quagga	Version 0.99.13
Quagga Quagga	Version 0.99.14
Quagga Quagga	Version 0.99.15
Quagga Quagga	Version 0.99.1
Quagga Quagga	Version 0.99.2
Quagga Quagga	Version 0.99.3
Quagga Quagga	Version 0.99.4
Quagga Quagga	Version 0.99.5
Quagga Quagga	Version 0.99.6
Quagga Quagga	Version 0.99.7
Quagga Quagga	Version 0.99.8
Quagga Quagga	Version 0.99.9

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (46)

http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=d64379e8f3c0636df53ed08d5b2f1946cfedd0e3

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html

Source: secalert@redhat.com

http://secunia.com/advisories/41038

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/41238

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/42397

Source: secalert@redhat.com

http://secunia.com/advisories/42446

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/42498

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/48106

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201202-02.xml

Source: secalert@redhat.com

http://www.debian.org/security/2010/dsa-2104

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2010:174

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2010/08/24/3

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2010/08/25/4

Source: secalert@redhat.com

http://www.quagga.net/news2.php?y=2010&m=8&d=19

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2010-0785.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2010-0945.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/42635

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1027-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/2304

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2010/3097

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/3124

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=626783

Source: secalert@redhat.com

http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=d64379e8f3c0636df53ed08d5b2f1946cfedd0e3

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/41038

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/41238

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/42397

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/42446

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/42498

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/48106

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-201202-02.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2010/dsa-2104

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2010:174

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2010/08/24/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2010/08/25/4

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.quagga.net/news2.php?y=2010&m=8&d=19

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2010-0785.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2010-0945.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/42635

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1027-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/2304

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2010/3097

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/3124

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=626783

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.