REDHAT-BUG-654614: Medium severity quagga routing software suite vulnerability

Published Nov 18, 2010

Updated

A security flaw was found in the way Quagga bgpd daemon processed certain route metrics information. A configured BGP peer could use this flaw to send a BGP message with specially-crafted value of AS-path attribute, which would cause the bgpd daemon on all systems on the route the message travels to reset the BGP session.

Affected Software

1 affected component

Quagga bgpd

Event History

Nov 18, 2010

Data Sourced

via Red Hat·12:09 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-654614?

The severity of REDHAT-BUG-654614 is critical due to its potential impact on BGP routing stability.

How do I fix REDHAT-BUG-654614?

To fix REDHAT-BUG-654614, update your Quagga bgpd software to the latest patched version.

Which software is affected by REDHAT-BUG-654614?

The software affected by REDHAT-BUG-654614 is the Quagga Routing Software Suite, specifically the bgpd daemon.

What type of vulnerability is REDHAT-BUG-654614?

REDHAT-BUG-654614 is a security flaw that involves improper processing of BGP messages.

Who can exploit REDHAT-BUG-654614?

A configured BGP peer can exploit REDHAT-BUG-654614 by sending specially-crafted BGP messages.