Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The bgp_nlri_parse_vpnv4 function in bgp_mplsvpn.c in the VPNv4 NLRI parser in bgpd in Quagga before 1.0.20160309, when a certain VPNv4 configuration is used, relies on a Labeled-VPN SAFI routes-data length field during a data copy, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted packet.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Quagga bgpd 基于栈的缓冲区溢出漏洞
Vulnerability Description
Quagga是美国软件开发者Kunihiro Ishiguro所研发的一款路由软件套件。该套件可在多种平台上实现OSPFv2、OSPFv3、RIP v1/v2等协议，并提供路由重分布、路由映射等功能。 Quagga 1.0.20160309之前版本的bgpd中的VPNv4 NLRI解析器中的bgp_mplsvpn.c文件中的‘bgp_nlri_parse_vpnv4’函数存在安全漏洞，该漏洞源于程序使用VPNv4配置时，没有正确检查Labeled-VPN SAFI路由数据的upper-bound长度。远程
CVSS Information
N/A
Vulnerability Type
N/A