Login Request a demo
Unscored severity · published May 6, 2009
CVE-2009-1572
The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing ASN elements whose string representation…
–
CVSS
3.5%
EPSS
No
On KEV
Description
The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.5% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QU
Quagga · Quagga
through 0.99.11; 0.95; 0.96; 0.96.1; 0.96.2; 0.96.3; +25 more · source: NVD
Affected product
QU
Quagga
Quagga
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1572
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1572
secunia.com
http://secunia.com/advisories/34999
secunia.com
http://secunia.com/advisories/35061
secunia.com
http://secunia.com/advisories/35203
secunia.com
http://secunia.com/advisories/35685
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2009:109
www.ubuntu.com
http://www.ubuntu.com/usn/usn-775-1
More from Quagga
9.8
CVE-2018-5379
The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes
9.8
CVE-2016-1245
It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages
8.2
CVE-2017-3224
Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber
8.1
CVE-2016-2342
The bgp_nlri_parse_vpnv4 function in bgp_mplsvpn.c in the VPNv4 NLRI parser in bgpd in Quagga before 1.0.20160309, when a certain VPNv4 configuration is used, relies on a…
7.8
CVE-2021-44038
An issue was discovered in Quagga through 1.2.4