CVE-2012-0255

Published: Apr 5, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a message associated with a malformed Four-octet AS Number Capability (aka AS4 capability).

Affected (40)

Products: Quagga: Quagga

Quagga

1 product

Quagga

Configuration A

40 vulnerable

Vulnerable Software	Affected Versions
Quagga Quagga	Up to 0.99.20
Quagga Quagga	Version 0.95
Quagga Quagga	Version 0.96.1
Quagga Quagga	Version 0.96.2
Quagga Quagga	Version 0.96.3
Quagga Quagga	Version 0.96.4
Quagga Quagga	Version 0.96.5
Quagga Quagga	Version 0.96
Quagga Quagga	Version 0.97.0
Quagga Quagga	Version 0.97.1
Quagga Quagga	Version 0.97.2
Quagga Quagga	Version 0.97.3
Quagga Quagga	Version 0.97.4
Quagga Quagga	Version 0.97.5
Quagga Quagga	Version 0.98.0
Quagga Quagga	Version 0.98.1
Quagga Quagga	Version 0.98.2
Quagga Quagga	Version 0.98.3
Quagga Quagga	Version 0.98.4
Quagga Quagga	Version 0.98.5
Quagga Quagga	Version 0.98.6
Quagga Quagga	Version 0.99.10
Quagga Quagga	Version 0.99.11
Quagga Quagga	Version 0.99.12
Quagga Quagga	Version 0.99.13
Quagga Quagga	Version 0.99.14
Quagga Quagga	Version 0.99.15
Quagga Quagga	Version 0.99.16
Quagga Quagga	Version 0.99.17
Quagga Quagga	Version 0.99.18
Quagga Quagga	Version 0.99.19
Quagga Quagga	Version 0.99.1
Quagga Quagga	Version 0.99.2
Quagga Quagga	Version 0.99.3
Quagga Quagga	Version 0.99.4
Quagga Quagga	Version 0.99.5
Quagga Quagga	Version 0.99.6
Quagga Quagga	Version 0.99.7
Quagga Quagga	Version 0.99.8
Quagga Quagga	Version 0.99.9