CVE-2009-1572: Medium severity Quagga Quagga vulnerability
Published May 6, 2009
·Updated
The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error.
Affected Software
31 affected components
Quagga Quagga<=0.99.11
Quagga Quagga=0.95
Quagga Quagga=0.96
Quagga Quagga=0.96.1
Quagga Quagga=0.96.2
Quagga Quagga=0.96.3
Quagga Quagga=0.96.4
Quagga Quagga=0.96.5
Quagga Quagga=0.97.0
Quagga Quagga=0.97.1
Quagga Quagga=0.97.2
Quagga Quagga=0.97.3
Quagga Quagga=0.97.4
Quagga Quagga=0.97.5
Quagga Quagga=0.98.0
Quagga Quagga=0.98.1
Quagga Quagga=0.98.2
Quagga Quagga=0.98.3
Quagga Quagga=0.98.4
Quagga Quagga=0.98.5
Quagga Quagga=0.98.6
Quagga Quagga=0.99.1
Quagga Quagga=0.99.2
Quagga Quagga=0.99.3
Quagga Quagga=0.99.4
Quagga Quagga=0.99.5
Quagga Quagga=0.99.6
Quagga Quagga=0.99.7
Quagga Quagga=0.99.8
Quagga Quagga=0.99.9
Quagga Quagga=0.99.10
Remediation
Patch Available
Patch Available
Patch Available
Event History
May 6, 2009
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-1572?
CVE-2009-1572 has a severity rating that indicates it can cause a denial of service (DoS) due to a crash in the BGP daemon.
2
How do I fix CVE-2009-1572?
To mitigate CVE-2009-1572, upgrade Quagga to a version later than 0.99.11.
3
Who is impacted by CVE-2009-1572?
CVE-2009-1572 affects all versions of Quagga up to and including 0.99.11.
4
What type of vulnerability is CVE-2009-1572?
CVE-2009-1572 is classified as a denial of service vulnerability.
5
Can CVE-2009-1572 be exploited remotely?
Yes, CVE-2009-1572 can be exploited remotely by attackers to crash the bgpd process.