CVE-2007-1995

描述

bgpd/bgp_attr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not validate length values in the MP_REACH_NLRI and MP_UNREACH_NLRI attributes, which allows remote attackers to cause a denial of service (daemon crash or exit) via crafted UPDATE messages that trigger an assertion error or out of bounds read.

如何修補 CVE-2007-1995

要修補 CVE-2007-1995,請將受影響套件升級到下列已修補版本。

• Debian/quagga—升級至 0.99.6-5 或更新版本
• Debian/quagga—升級至 0.98.3-7.4 或更新版本

CVE-2007-1995 正在被利用嗎?

低 — EPSS 為 1.7%,目前沒有觀察到大規模利用活動。

受影響套件(2)

• from 0, < 0.99.6-5
• from 0, < 0.98.3-7.4

參考連結(26)

• ADVISORYsecunia.com/advisories/24808
• ADVISORYsecunia.com/advisories/25084
• ADVISORYsecunia.com/advisories/25119
• ADVISORYsecunia.com/advisories/25255
• ADVISORYsecunia.com/advisories/25293