5

CVE-2010-2949

bgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unknown AS type in an AS path attribute in a BGP UPDATE message.

Data is provided by the National Vulnerability Database (NVD)
Quagga ≫ Quagga Version <= 0.99.16
Quagga ≫ Quagga Version0.95
Quagga ≫ Quagga Version0.96
Quagga ≫ Quagga Version0.96.1
Quagga ≫ Quagga Version0.96.2
Quagga ≫ Quagga Version0.96.3
Quagga ≫ Quagga Version0.96.4
Quagga ≫ Quagga Version0.96.5
Quagga ≫ Quagga Version0.97.0
Quagga ≫ Quagga Version0.97.1
Quagga ≫ Quagga Version0.97.2
Quagga ≫ Quagga Version0.97.3
Quagga ≫ Quagga Version0.97.4
Quagga ≫ Quagga Version0.97.5
Quagga ≫ Quagga Version0.98.0
Quagga ≫ Quagga Version0.98.1
Quagga ≫ Quagga Version0.98.2
Quagga ≫ Quagga Version0.98.3
Quagga ≫ Quagga Version0.98.4
Quagga ≫ Quagga Version0.98.5
Quagga ≫ Quagga Version0.98.6
Quagga ≫ Quagga Version0.99.1
Quagga ≫ Quagga Version0.99.2
Quagga ≫ Quagga Version0.99.3
Quagga ≫ Quagga Version0.99.4
Quagga ≫ Quagga Version0.99.5
Quagga ≫ Quagga Version0.99.6
Quagga ≫ Quagga Version0.99.7
Quagga ≫ Quagga Version0.99.8
Quagga ≫ Quagga Version0.99.9
Quagga ≫ Quagga Version0.99.10
Quagga ≫ Quagga Version0.99.11
Quagga ≫ Quagga Version0.99.12
Quagga ≫ Quagga Version0.99.13
Quagga ≫ Quagga Version0.99.14
Quagga ≫ Quagga Version0.99.15
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 4.64% 0.882
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P