CVE-2009-1572

Description

The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error.

• How can I get the fixes?
• What do statuses mean?

References

• MITRE
• NVD
• Launchpad
• Debian

Related Ubuntu Security Notices (USN)

• USN-775-1
• Quagga vulnerability
• 12 May 2009

Other references

• https://www.cve.org/CVERecord?id=CVE-2009-1572