Quagga < 0.99.18 BGPD Multiple Denial of Service Vulnerabilities
Medium Nessus Plugin ID 59789
Synopsis
The remote service may be affected by multiple denial of service vulnerabilities.
Description
According to its self-reported version number, the installation of Quagga's BGP daemon listening on the remote host is affected by multiple denial of service vulnerabilities :
- A denial of service vulnerability can be triggered by a malformed AS_PATHLIMIT path attribute. (CVE-2010-1675)
- A denial of service vulnerability can be triggered by a malformed extended communities attribute. (CVE-2010-1674)
Solution
Upgrade to version 0.99.18 or later.