CVE-2010-1675: Medium severity quagga routing software suite vulnerability
A security flaw was found in the way Quagga bgpd daemon processed certain route metrics information. A configured BGP peer could use this flaw to send a BGP message with specially-crafted value of AS-path attribute, which would cause the bgpd daemon on all systems on the route the message travels to reset the BGP session.
Other sources
bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (session reset) via a malformed ASPATHLIMIT path attribute.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1675?
CVE-2010-1675 has a moderate severity level due to its potential impact on BGP routing stability.
How do I fix CVE-2010-1675?
To fix CVE-2010-1675, upgrade to Quagga version 0.99.18 or later, which resolves this vulnerability.
What systems are affected by CVE-2010-1675?
CVE-2010-1675 affects multiple versions of the Quagga Routing Software Suite, specifically versions up to 0.99.17 inclusive.
What kind of attacks can exploit CVE-2010-1675?
CVE-2010-1675 can be exploited through specially-crafted BGP messages that manipulate the AS-path attribute.
Is CVE-2010-1675 a remote vulnerability?
Yes, CVE-2010-1675 can be exploited remotely by a malicious BGP peer.