5

CVE-2009-1572

Exploit

The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error.

Data is provided by the National Vulnerability Database (NVD)
Quagga ≫ Quagga Version <= 0.99.11
Quagga ≫ Quagga Version0.95
Quagga ≫ Quagga Version0.96
Quagga ≫ Quagga Version0.96.1
Quagga ≫ Quagga Version0.96.2
Quagga ≫ Quagga Version0.96.3
Quagga ≫ Quagga Version0.96.4
Quagga ≫ Quagga Version0.96.5
Quagga ≫ Quagga Version0.97.0
Quagga ≫ Quagga Version0.97.1
Quagga ≫ Quagga Version0.97.2
Quagga ≫ Quagga Version0.97.3
Quagga ≫ Quagga Version0.97.4
Quagga ≫ Quagga Version0.97.5
Quagga ≫ Quagga Version0.98.0
Quagga ≫ Quagga Version0.98.1
Quagga ≫ Quagga Version0.98.2
Quagga ≫ Quagga Version0.98.3
Quagga ≫ Quagga Version0.98.4
Quagga ≫ Quagga Version0.98.5
Quagga ≫ Quagga Version0.98.6
Quagga ≫ Quagga Version0.99.1
Quagga ≫ Quagga Version0.99.2
Quagga ≫ Quagga Version0.99.3
Quagga ≫ Quagga Version0.99.4
Quagga ≫ Quagga Version0.99.5
Quagga ≫ Quagga Version0.99.6
Quagga ≫ Quagga Version0.99.7
Quagga ≫ Quagga Version0.99.8
Quagga ≫ Quagga Version0.99.9
Quagga ≫ Quagga Version0.99.10
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 11.18% 0.928
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P