CVE-2010-1675

Published: 15 March 2011

bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (session reset) via a malformed AS_PATHLIMIT path attribute.

Notes

Author	Note
mdeslaur	dapper doesn't have AS_PATHLIMIT

Package	Release	Status
quagga Launchpad, Ubuntu, Debian	dapper	Not vulnerable (code not present)
	hardy	Released (0.99.9-2ubuntu1.5)
	karmic	Released (0.99.13-1ubuntu0.2)
	lucid	Released (0.99.15-1ubuntu0.2)
	maverick	Released (0.99.17-1ubuntu0.1)
	upstream	Released (0.99.18)

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.