CVE-2010-2949: Null Pointer Dereference
A NULL pointer dereference flaw was found in the way Quagga's bgpd daemon parsed paths of autonomous systems (AS). A configured BGP peer could send a BGP update AS path request with unknown AS type, which could lead to denial of service (bgpd daemon crash).
Upstream changeset: [1] http://code.quagga.net/?p=quagga.git;a=commit;h=cddb8112b80fa9867156c637d63e6e79eeac67bb
References: [2] http://www.quagga.net/news2.php?y=2010&m=8&d=19#id1282241100
CVE Request: [3] http://www.openwall.com/lists/oss-security/2010/08/24/3
Other sources
bgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unknown AS type in an AS path attribute in a BGP UPDATE message.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2949?
CVE-2010-2949 has a severity of medium, as it can lead to denial of service due to a NULL pointer dereference.
How do I fix CVE-2010-2949?
To fix CVE-2010-2949, users should upgrade to a patched version of Quagga that addresses this vulnerability.
Which versions of Quagga are affected by CVE-2010-2949?
CVE-2010-2949 affects Quagga versions up to 0.99.16 and specific older versions, such as 0.95 to 0.98.x.
What type of vulnerability is CVE-2010-2949?
CVE-2010-2949 is classified as a NULL pointer dereference vulnerability in the BGP daemon of Quagga.
What could be the impact of CVE-2010-2949?
The impact of CVE-2010-2949 is a denial of service, as it can cause the bgpd daemon to crash.