CVE-2012-1820

Published: Jun 13, 2012Modified: Apr 29, 2026

2.9

Vector

AV:A/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 5.5 / Impact: 2.9

Source: NVD

Description

The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering (ORF) capability TLV in an OPEN message.

Affected (41)

Products: Quagga: Quagga

Quagga

1 product

Quagga

Configuration A

41 vulnerable

Vulnerable Software	Affected Versions
Quagga Quagga	Up to 0.99.20.1
Quagga Quagga	Version 0.95
Quagga Quagga	Version 0.96.1
Quagga Quagga	Version 0.96.2
Quagga Quagga	Version 0.96.3
Quagga Quagga	Version 0.96.4
Quagga Quagga	Version 0.96.5
Quagga Quagga	Version 0.96
Quagga Quagga	Version 0.97.0
Quagga Quagga	Version 0.97.1
Quagga Quagga	Version 0.97.2
Quagga Quagga	Version 0.97.3
Quagga Quagga	Version 0.97.4
Quagga Quagga	Version 0.97.5
Quagga Quagga	Version 0.98.0
Quagga Quagga	Version 0.98.1
Quagga Quagga	Version 0.98.2
Quagga Quagga	Version 0.98.3
Quagga Quagga	Version 0.98.4
Quagga Quagga	Version 0.98.5
Quagga Quagga	Version 0.98.6
Quagga Quagga	Version 0.99.10
Quagga Quagga	Version 0.99.11
Quagga Quagga	Version 0.99.12
Quagga Quagga	Version 0.99.13
Quagga Quagga	Version 0.99.14
Quagga Quagga	Version 0.99.15
Quagga Quagga	Version 0.99.16
Quagga Quagga	Version 0.99.17
Quagga Quagga	Version 0.99.18
Quagga Quagga	Version 0.99.19
Quagga Quagga	Version 0.99.1
Quagga Quagga	Version 0.99.20
Quagga Quagga	Version 0.99.2
Quagga Quagga	Version 0.99.3
Quagga Quagga	Version 0.99.4
Quagga Quagga	Version 0.99.5
Quagga Quagga	Version 0.99.6
Quagga Quagga	Version 0.99.7
Quagga Quagga	Version 0.99.8
Quagga Quagga	Version 0.99.9