Wind River Support Network

HomeDefectsLIN5-23974
Fixed

LIN5-23974 : Security Advisory - quagga - CVE-2017-16227

Created: Nov 13, 2017    Updated: May 29, 2018
Resolved Date: Dec 3, 2017
Found In Version: 5.0.1.41
Fix Version: 5.0.1.42
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Userspace

Description

The aspath_put function in bgpd/bgp_aspath.c in Quagga before 1.2.2 allows remote attackers to cause a denial of service (session drop) via BGP UPDATE messages, because AS_PATH size calculation for long paths counts certain bytes twice and consequently constructs an invalid message.

https://nvd.nist.gov/vuln/detail/CVE-2017-16227

Other Downloads


Live chat
Online