Quagga < 0.99.9 BGPD Multiple Denial of Service Vulnerabilities
Low Nessus Plugin ID 59795
Synopsis
The remote service may be affected by multiple denial of service vulnerabilities.
Description
According to its self-reported version number, the installation of Quagga's BGP daemon listening on the remote host is affected by multiple denial of service vulnerabilities :
- A denial of service vulnerability can be triggered by a malformed OPEN message from an explicitly configured BGP peer.
- A denial of service vulnerability can be triggered by a malformed COMMUNITY attribute from an explicitly configured BGP peer, when the daemon has debugging enabled.
Solution
Upgrade to version 0.99.9 or later.