Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

quagga: improper assertion

Package(s):

quagga

CVE #(s):

Created:

May 5, 2009

Updated:

May 6, 2009

Description:

From the Debian advisory: It was discovered that Quagga, an IP routing daemon, could no longer process the Internet routing table due to broken handling of multiple 4-byte AS numbers in an AS path. If such a prefix is received, the BGP daemon crashes with an assert failure, leading to a denial of service.

Alerts:

Debian

DSA-1788-1

2009-05-04

(Log in to post comments)