The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering (ORF) capability TLV in an OPEN message.
2012-06-13T15:55:01.057
2025-04-11T00:51:21.963
Deferred
CVSSv2: 2.9 (LOW)
AV:A/AC:M/Au:N/C:N/I:N/A:P
5.5
2.9
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | quagga | quagga | ≤ 0.99.20.1 | Yes |
Application | quagga | quagga | 0.95 | Yes |
Application | quagga | quagga | 0.96 | Yes |
Application | quagga | quagga | 0.96.1 | Yes |
Application | quagga | quagga | 0.96.2 | Yes |
Application | quagga | quagga | 0.96.3 | Yes |
Application | quagga | quagga | 0.96.4 | Yes |
Application | quagga | quagga | 0.96.5 | Yes |
Application | quagga | quagga | 0.97.0 | Yes |
Application | quagga | quagga | 0.97.1 | Yes |
Application | quagga | quagga | 0.97.2 | Yes |
Application | quagga | quagga | 0.97.3 | Yes |
Application | quagga | quagga | 0.97.4 | Yes |
Application | quagga | quagga | 0.97.5 | Yes |
Application | quagga | quagga | 0.98.0 | Yes |
Application | quagga | quagga | 0.98.1 | Yes |
Application | quagga | quagga | 0.98.2 | Yes |
Application | quagga | quagga | 0.98.3 | Yes |
Application | quagga | quagga | 0.98.4 | Yes |
Application | quagga | quagga | 0.98.5 | Yes |
Application | quagga | quagga | 0.98.6 | Yes |
Application | quagga | quagga | 0.99.1 | Yes |
Application | quagga | quagga | 0.99.2 | Yes |
Application | quagga | quagga | 0.99.3 | Yes |
Application | quagga | quagga | 0.99.4 | Yes |
Application | quagga | quagga | 0.99.5 | Yes |
Application | quagga | quagga | 0.99.6 | Yes |
Application | quagga | quagga | 0.99.7 | Yes |
Application | quagga | quagga | 0.99.8 | Yes |
Application | quagga | quagga | 0.99.9 | Yes |
Application | quagga | quagga | 0.99.10 | Yes |
Application | quagga | quagga | 0.99.11 | Yes |
Application | quagga | quagga | 0.99.12 | Yes |
Application | quagga | quagga | 0.99.13 | Yes |
Application | quagga | quagga | 0.99.14 | Yes |
Application | quagga | quagga | 0.99.15 | Yes |
Application | quagga | quagga | 0.99.16 | Yes |
Application | quagga | quagga | 0.99.17 | Yes |
Application | quagga | quagga | 0.99.18 | Yes |
Application | quagga | quagga | 0.99.19 | Yes |
Application | quagga | quagga | 0.99.20 | Yes |