CVE-2007-4826
Fixed in a distro release EPSS 2%
bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service (crash) via a malformed (1) OPEN message or (2) a COMMUNITY attribute, which triggers a NULL pointer dereference. NOTE: vector 2 only exists when debugging is enabled.
Products: quagga
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.1 | quagga | 0.98.3-7.5 |
| Debian 4.0 | quagga | 0.99.5-5etch3 |
| Red Hat Enterprise Linux 4 | quagga | 0:0.98.3-4.el4_8.1 |
| Red Hat Enterprise Linux 4 | quagga-contrib | 0:0.98.3-4.el4_8.1 |
| Red Hat Enterprise Linux 4 | quagga-debuginfo | 0:0.98.3-4.el4_8.1 |
| Red Hat Enterprise Linux 4 | quagga-devel | 0:0.98.3-4.el4_8.1 |
| Red Hat Enterprise Linux 5 | quagga | 0:0.98.6-5.el5_5.2 |
| Red Hat Enterprise Linux 5 | quagga-contrib | 0:0.98.6-5.el5_5.2 |
| Red Hat Enterprise Linux 5 | quagga-debuginfo | 0:0.98.6-5.el5_5.2 |
| Red Hat Enterprise Linux 5 | quagga-devel | 0:0.98.6-5.el5_5.2 |