Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service (crash) via a malformed (1) OPEN message or (2) a COMMUNITY attribute, which triggers a NULL pointer dereference. NOTE: vector 2 only exists when debugging is enabled.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Quagga bgpd路由组件远程拒绝服务漏洞
Vulnerability Description
Quagga是美国软件开发者Kunihiro Ishiguro所研发的一款路由软件套件。该套件可在多种平台上实现OSPFv2、OSPFv3、RIP v1/v2等协议，并提供路由重分布、路由映射等功能。 如果所配置的对等端所发送的BGP OPEN消息中包含有无效的消息长度和有效的选项参数，或有效的消息长度和无效的选项参数，就会在流函数库中触发断言失败；如果启用了debug bgp updates选项的话，则所配置对等端所发送的UPDATE中的畸形COMMUNITIES属性会触发空指针引用。成功利用这两个漏洞
CVSS Information
N/A
Vulnerability Type
N/A