CVE-2010-1674: Null Pointer Dereference
A NULL pointer dereference flaw was found in the way Quagga bgpd daemon processed malformed route information. A configured BGP peer could crash bgpd on a target system via a BGP message with specially-crafted value of BGP Extended Communities attribute.
Other sources
The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed Extended Communities attribute.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1674?
CVE-2010-1674 is considered a high-severity vulnerability due to its potential to crash the bgpd daemon.
How do I fix CVE-2010-1674?
To mitigate CVE-2010-1674, update Quagga to a version greater than or equal to 0.99.17.
What systems are affected by CVE-2010-1674?
CVE-2010-1674 affects various versions of the Quagga Routing Software Suite up to and including version 0.99.16.
Can CVE-2010-1674 be exploited remotely?
Yes, CVE-2010-1674 can be exploited remotely via specially crafted BGP messages from a configured BGP peer.
What type of vulnerability is CVE-2010-1674?
CVE-2010-1674 is a NULL pointer dereference vulnerability related to malformed route information processing.