Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2010-1674

Опубликовано: 21 мар. 2011
Источник: redhat
CVSS2: 1.8
EPSS Низкий

Описание

The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed Extended Communities attribute.

Отчет

Vulnerable. This issue affects quagga packages in Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 4quaggaWill not fix
Red Hat Enterprise Linux 5quaggaFixedRHSA-2012:125812.09.2012
Red Hat Enterprise Linux 6quaggaFixedRHSA-2011:040631.03.2011

Показывать по

Дополнительная информация

Статус:

Low
https://bugzilla.redhat.com/show_bug.cgi?id=654603quagga: DoS (crash) by processing malformed extended community attribute in a route

EPSS

Процентиль: 88%
0.03779
Низкий

1.8 Low

CVSS2

Связанные уязвимости

ubuntu
около 14 лет назад

The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed Extended Communities attribute.

nvd
около 14 лет назад

The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed Extended Communities attribute.

debian
около 14 лет назад

The extended-community parser in bgpd in Quagga before 0.99.18 allows ...

github
около 3 лет назад

The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed Extended Communities attribute.

oracle-oval
около 14 лет назад

ELSA-2011-0406: quagga security update (MODERATE)

EPSS

Процентиль: 88%
0.03779
Низкий

1.8 Low

CVSS2