NetSight
IP …
medium5.0

CVE-2012-0255

The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a den…

Impact

The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a message associated with a malformed Four-octet AS Number Capability (aka AS4 capability).

Affected products

VendorProductAffected versions
QuaggaQuagga
through 0.99.20
Versions 0.95, 0.96, 0.96.1, 0.96.2, 0.96.3

Weakness classification

CWE-119

References