RHSA-2012:1258: Moderate: quagga security update

Quagga is a TCP/IP based routing software suite. The Quagga bgpd daemonimplements the BGP (Border Gateway Protocol) routing protocol. The Quaggaospfd and ospf6d daemons implement the OSPF (Open Shortest Path First)routing protocol.A heap-based buffer overflow flaw was found in the way the bgpd daemonprocessed malformed Extended Communities path attributes. An attacker couldsend a specially-crafted BGP message, causing bgpd on a target system tocrash or, possibly, execute arbitrary code with the privileges of the userrunning bgpd. The UPDATE message would have to arrive from an explicitlyconfigured BGP peer, but could have originated elsewhere in the BGPnetwork. (CVE-2011-3327)A NULL pointer dereference flaw was found in the way the bgpd daemonprocessed malformed route Extended Communities attributes. A configuredBGP peer could crash bgpd on a target system via a specially-crafted BGPmessage. (CVE-2010-1674)A stack-based buffer overflow flaw was found in the way the ospf6d daemonprocessed malformed Link State Update packets. An OSPF router could usethis flaw to crash ospf6d on an adjacent router. (CVE-2011-3323)A flaw was found in the way the ospf6d daemon processed malformed linkstate advertisements. An OSPF neighbor could use this flaw to crashospf6d on a target system. (CVE-2011-3324)A flaw was found in the way the ospfd daemon processed malformed Hellopackets. An OSPF neighbor could use this flaw to crash ospfd on atarget system. (CVE-2011-3325)A flaw was found in the way the ospfd daemon processed malformed link stateadvertisements. An OSPF router in the autonomous system could use this flawto crash ospfd on a target system. (CVE-2011-3326)An assertion failure was found in the way the ospfd daemon processedcertain Link State Update packets. An OSPF router could use this flaw tocause ospfd on an adjacent router to abort. (CVE-2012-0249)A buffer overflow flaw was found in the way the ospfd daemon processedcertain Link State Update packets. An OSPF router could use this flaw tocrash ospfd on an adjacent router. (CVE-2012-0250)Red Hat would like to thank CERT-FI for reporting CVE-2011-3327,CVE-2011-3323, CVE-2011-3324, CVE-2011-3325, and CVE-2011-3326; and theCERT/CC for reporting CVE-2012-0249 and CVE-2012-0250. CERT-FI acknowledgesRiku Hietamaki, Tuomo Untinen and Jukka Taimisto of the Codenomicon CROSSproject as the original reporters of CVE-2011-3327, CVE-2011-3323,CVE-2011-3324, CVE-2011-3325, and CVE-2011-3326. The CERT/CC acknowledgesMartin Winter at OpenSourceRouting.org as the original reporter ofCVE-2012-0249 and CVE-2012-0250.Users of quagga should upgrade to these updated packages, which containbackported patches to correct these issues. After installing the updatedpackages, the bgpd, ospfd, and ospf6d daemons will be restartedautomatically.