CVE-2016-4049

Published: May 23, 2016Modified: May 6, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of service (assertion failure and daemon crash) via a large BGP packet.

Affected (3)

Products: Quagga: Quagga · Opensuse: Leap, Opensuse

1 product

2 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Quagga Quagga	All versions

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 42.1
Opensuse Opensuse	Version 13.2

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (18)

http://lists.opensuse.org/opensuse-updates/2016-05/msg00062.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2017-0794.html

Source: cve@mitre.org

http://www.debian.org/security/2016/dsa-3654

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2016/04/27/7

Source: cve@mitre.org

http://www.securityfocus.com/bid/88561

Source: cve@mitre.org

http://www.securitytracker.com/id/1035699

Source: cve@mitre.org

https://lists.quagga.net/pipermail/quagga-dev/2016-February/014743.html

Source: cve@mitre.org

https://lists.quagga.net/pipermail/quagga-dev/2016-January/014699.html

Source: cve@mitre.org

https://security.gentoo.org/glsa/201701-48

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2016-05/msg00062.html