Secunia

Paul Jakma has reported a vulnerability in Quagga, which can be exploited by malicious users to cause a DoS (Denial of Service).

The vulnerability is caused due to bgpd not checking the length information of the "MP_UNREACH_NLRI" and "MP_REACH_NLRI" attributes. This can be exploited to cause an assertion error or out of bounds read by sending a specially crafted UPDATE message.

Successful exploitation requires that the attacker is configured as peer of the victim system.

The vulnerability is reported in all existing Quagga versions.

Solution
Connect to trusted peers only.

Provided and/or discovered by
Paul Jakma

Changelog
Further details available in Customer Area

Original Advisory
http://www.quagga.net/news2.php?y=2007&m=4&d=8#id1176073740
http://bugzilla.quagga.net/show_bug.cgi?id=354

Deep Links
Links available in Customer Area