[ MDVSA-2009:109 ] quagga

[dude67]

_______________________________________________________________________

Package : quagga
Date : May 10, 2009
Affected: Corporate 4.0
_______________________________________________________________________

Problem Description:

The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote
attackers to cause a denial of service (crash) via an AS path
containing ASN elements whose string representation is longer than
expected, which triggers an assert error (CVE-2009-1572).

Updated packages are available that bring Quagga to version 0.99.12
which provides numerous bugfixes over the previous 0.99.9 version,
and also corrects this issue.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cg ... -2009-1572
_______________________________________________________________________