Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2007-1995

bgpd/bgp_attr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not validate length values in the MP_REACH_NLRI and MP_UNREACH_NLRI attributes, which allows remote attackers to cause a denial of service (daemon crash or exit) via crafted UPDATE messages that trigger an assertion error or out of bounds read.

  • Published: Apr 12, 2007
  • Updated: Apr 13, 2023
  • CVE: CVE-2007-1995
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.3
  • AV:N/AC:M/Au:S/C:N/I:N/A:C

CWEs:

Software From Fixed in
quagga / quagga 0.97.5 0.97.5.x
quagga / quagga 0.95 0.95.x
quagga / quagga 0.98.3 0.98.3.x
quagga / quagga 0.96.3 0.96.3.x
quagga / quagga 0.96.5 0.96.5.x
quagga / quagga 0.98.0 0.98.0.x
quagga / quagga 0.96.1 0.96.1.x
quagga / quagga 0.98.1 0.98.1.x
quagga / quagga 0.96.4 0.96.4.x
quagga / quagga - 0.98.6.x
quagga / quagga 0.98.5 0.98.5.x
quagga / quagga 0.97.3 0.97.3.x
quagga / quagga 0.97.4 0.97.4.x
quagga / quagga 0.98.4 0.98.4.x
quagga / quagga 0.98.2 0.98.2.x
quagga / quagga 0.97.1 0.97.1.x
quagga / quagga 0.97.0 0.97.0.x
quagga / quagga 0.96.2 0.96.2.x
quagga / quagga 0.97.2 0.97.2.x
quagga / quagga 0.96 0.96.x