CVE-2010-2949

Published: Sep 10, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

bgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unknown AS type in an AS path attribute in a BGP UPDATE message.

Affected (36)

Products: Quagga: Quagga

1 product

Configuration A

36 vulnerable

Vulnerable Software	Affected Versions
Quagga Quagga	Up to 0.99.16
Quagga Quagga	Version 0.95
Quagga Quagga	Version 0.96.1
Quagga Quagga	Version 0.96.2
Quagga Quagga	Version 0.96.3
Quagga Quagga	Version 0.96.4
Quagga Quagga	Version 0.96.5
Quagga Quagga	Version 0.96
Quagga Quagga	Version 0.97.0
Quagga Quagga	Version 0.97.1
Quagga Quagga	Version 0.97.2
Quagga Quagga	Version 0.97.3
Quagga Quagga	Version 0.97.4
Quagga Quagga	Version 0.97.5
Quagga Quagga	Version 0.98.0
Quagga Quagga	Version 0.98.1
Quagga Quagga	Version 0.98.2
Quagga Quagga	Version 0.98.3
Quagga Quagga	Version 0.98.4
Quagga Quagga	Version 0.98.5
Quagga Quagga	Version 0.98.6
Quagga Quagga	Version 0.99.10
Quagga Quagga	Version 0.99.11
Quagga Quagga	Version 0.99.12
Quagga Quagga	Version 0.99.13
Quagga Quagga	Version 0.99.14
Quagga Quagga	Version 0.99.15
Quagga Quagga	Version 0.99.1
Quagga Quagga	Version 0.99.2
Quagga Quagga	Version 0.99.3
Quagga Quagga	Version 0.99.4
Quagga Quagga	Version 0.99.5
Quagga Quagga	Version 0.99.6
Quagga Quagga	Version 0.99.7
Quagga Quagga	Version 0.99.8
Quagga Quagga	Version 0.99.9

References (44)

http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=cddb8112b80fa9867156c637d63e6e79eeac67bb

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html

Source: secalert@redhat.com

http://secunia.com/advisories/41038

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/41238

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/42397

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/42446

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/42498

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/48106

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201202-02.xml

Source: secalert@redhat.com

http://www.debian.org/security/2010/dsa-2104

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2010:174

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2010/08/24/3

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2010/08/25/4

Source: secalert@redhat.com

http://www.quagga.net/news2.php?y=2010&m=8&d=19

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2010-0945.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/42642

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1027-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/2304

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2010/3097

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2010/3124

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=626795

Source: secalert@redhat.com

http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=cddb8112b80fa9867156c637d63e6e79eeac67bb

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/41038

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/41238

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/42397

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/42446

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/42498

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/48106

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-201202-02.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2010/dsa-2104

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2010:174

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2010/08/24/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2010/08/25/4

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.quagga.net/news2.php?y=2010&m=8&d=19

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2010-0945.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/42642

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1027-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/2304

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2010/3097

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2010/3124

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=626795

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.