FKIE_CVE-2010-1675

Vulnerability from fkie_nvd - Published: 2011-03-29 18:55 - Updated: 2025-04-11 00:51
Severity ?
Summary
bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (session reset) via a malformed AS_PATHLIMIT path attribute.
References
cve@mitre.orghttp://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
cve@mitre.orghttp://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html
cve@mitre.orghttp://secunia.com/advisories/43499Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/43770Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/48106
cve@mitre.orghttp://security.gentoo.org/glsa/glsa-201202-02.xml
cve@mitre.orghttp://www.debian.org/security/2011/dsa-2197
cve@mitre.orghttp://www.mandriva.com/security/advisories?name=MDVSA-2011:058
cve@mitre.orghttp://www.osvdb.org/71258
cve@mitre.orghttp://www.quagga.net/news2.php?y=2011&m=3&d=21#id1300723200
cve@mitre.orghttp://www.securityfocus.com/bid/46943
cve@mitre.orghttp://www.vupen.com/english/advisories/2011/0711Vendor Advisory
cve@mitre.orghttps://bugzilla.redhat.com/show_bug.cgi?id=654614
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/66212
af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/43499Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/43770Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/48106
af854a3a-2127-422b-91ae-364da2661108http://security.gentoo.org/glsa/glsa-201202-02.xml
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2011/dsa-2197
af854a3a-2127-422b-91ae-364da2661108http://www.mandriva.com/security/advisories?name=MDVSA-2011:058
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/71258
af854a3a-2127-422b-91ae-364da2661108http://www.quagga.net/news2.php?y=2011&m=3&d=21#id1300723200
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/46943
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2011/0711Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=654614
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/66212
Impacted products
Vendor Product Version
quagga quagga *
quagga quagga 0.95
quagga quagga 0.96
quagga quagga 0.96.1
quagga quagga 0.96.2
quagga quagga 0.96.3
quagga quagga 0.96.4
quagga quagga 0.96.5
quagga quagga 0.97.0
quagga quagga 0.97.1
quagga quagga 0.97.2
quagga quagga 0.97.3
quagga quagga 0.97.4
quagga quagga 0.97.5
quagga quagga 0.98.0
quagga quagga 0.98.1
quagga quagga 0.98.2
quagga quagga 0.98.3
quagga quagga 0.98.4
quagga quagga 0.98.5
quagga quagga 0.98.6
quagga quagga 0.99.1
quagga quagga 0.99.2
quagga quagga 0.99.3
quagga quagga 0.99.4
quagga quagga 0.99.5
quagga quagga 0.99.6
quagga quagga 0.99.7
quagga quagga 0.99.8
quagga quagga 0.99.9
quagga quagga 0.99.10
quagga quagga 0.99.11
quagga quagga 0.99.12
quagga quagga 0.99.13
quagga quagga 0.99.14
quagga quagga 0.99.15
quagga quagga 0.99.16
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:quagga:quagga:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DC571045-E383-4B76-B026-629CFDA1E93F",
              "versionEndIncluding": "0.99.17",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.95:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD7A8AD5-A315-4242-960C-05E792B30547",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.96:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B83BCE2-24D0-4B5B-A034-62BFF1894AE2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.96.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "FDD63DD9-1809-4CEC-AB69-955A7B127CA8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.96.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "0A2AD1AD-DDE2-477B-8EFD-767B6FD8EDBB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.96.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "99BD881B-9B53-4E12-B083-87C9C87CDF62",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.96.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "F910313F-FFE1-470A-A9B6-8A854C73DC97",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.96.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "9B0A9232-968D-4D3E-82A0-F5CC858EAF48",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.97.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD5F4CFB-BE1F-4424-8D2F-B921704E3AA0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.97.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "3A55FF13-8E56-4A27-B7FD-A855735E1045",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.97.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "F7DDBC3B-99BB-4404-9A73-90ED6581D69A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.97.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "AB09A713-E91E-44E7-8B82-F70F655A97B1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.97.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "10173750-690B-4576-AB3F-11A0861AA78B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.97.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "0EF8693A-D561-4D2E-BD60-5630601C6A94",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.98.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "BE43983A-73CB-41A5-889B-1AEA9A27F440",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.98.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "6EB589E9-85C0-4E87-856B-A2832383B129",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.98.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "7CF5EB8A-8E46-4490-BA88-03D4BED3EB84",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.98.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "C6445BEF-245C-47CE-9779-96C97CFD4DA7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.98.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "48D007FD-C1AD-477E-9AA5-DDB4522D3248",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.98.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "D6ADB9F6-B519-45D0-966F-F095372FBB49",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.98.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "6E914BAF-2E3A-415E-BAA7-FA02B4A22E25",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "55FCB7EC-8060-434B-B485-0DC7DBFE117D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "9524E069-2A80-4068-9945-2752EF2126EB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "9E1B30CC-478C-4BD1-AF4C-D126B8CCE8D6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "1D713119-F9C6-4656-92C9-A5B863A4B72F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A5E99C8-3778-416B-915F-7335C72435B2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "578DCE6D-3360-43DA-B22E-E0005A6AF388",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4D7B93B-0CF5-4CAF-B1F4-8A816A427BC7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "5FDAF214-1851-4DFC-ACAA-37D8CD83D323",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "B41BBCA6-237B-4CB6-9208-571D47251E18",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "FD6CAB29-56F9-4C54-97D8-CBB338658EB0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "C69C603A-34A1-4EF9-A332-6984928BF72C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "E8814493-75B4-45DD-886B-054A1C27F870",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "E98DCCDE-2800-4FC5-BE49-3EC7583F9768",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "EF2C126C-075D-42F0-B9DD-95267D14C818",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "62379505-A869-48AA-8A32-768583F12266",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "737C92B8-185F-4049-A7F4-D9D4DA6DDFDC",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (session reset) via a malformed AS_PATHLIMIT path attribute."
    },
    {
      "lang": "es",
      "value": "bgpd de Quagga en versiones anteriores a la 0.99.18 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (reinicio de la sesi\u00f3n) a tra\u00e9s de un atributo de ruta AS_PATHLIMIT mal formado."
    }
  ],
  "id": "CVE-2010-1675",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2011-03-29T18:55:01.333",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/43499"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/43770"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/48106"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-201202-02.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2011/dsa-2197"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:058"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/71258"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.quagga.net/news2.php?y=2011\u0026m=3\u0026d=21#id1300723200"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/46943"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2011/0711"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=654614"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66212"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/43499"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/43770"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/48106"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-201202-02.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2011/dsa-2197"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:058"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/71258"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.quagga.net/news2.php?y=2011\u0026m=3\u0026d=21#id1300723200"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/46943"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2011/0711"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=654614"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66212"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.