CVE-2007-4826

Published: 12 September 2007

bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service (crash) via a malformed (1) OPEN message or (2) a COMMUNITY attribute, which triggers a NULL pointer dereference. NOTE: vector 2 only exists when debugging is enabled.

Notes

only vulnerable to configured upstream peers

Status

References

• https://ubuntu.com/security/notices/USN-512-1
• https://www.cve.org/CVERecord?id=CVE-2007-4826
• NVD
• Launchpad
• Debian