Описание
Security update for quagga
This update for quagga fixes the following security issues:
- CVE-2016-4049: Remote crash vulerability with specially crafted packages due to a buffer overflow error in bgp_dump_routes_func (boo#977012)
Список пакетов
openSUSE Leap 42.1
quagga-0.99.24.1-11.1
quagga-devel-0.99.24.1-11.1
Ссылки
- E-Mail link for openSUSE-SU-2016:1313-1
- SUSE Security Ratings
Описание
The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of service (assertion failure and daemon crash) via a large BGP packet.
Затронутые продукты
openSUSE Leap 42.1:quagga-0.99.24.1-11.1
openSUSE Leap 42.1:quagga-devel-0.99.24.1-11.1
Ссылки
- CVE-2016-4049
- SUSE Bug 977012