CVE-2009-1572

Publication date 6 May 2009

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
quagga 9.04 jaunty
Fixed 0.99.11-1ubuntu0.1
8.10 intrepid
Fixed 0.99.9-6ubuntu0.1
8.04 LTS hardy
Fixed 0.99.9-2ubuntu1.2
6.06 LTS dapper
Fixed 0.99.2-1ubuntu3.5

References

Related Ubuntu Security Notices (USN)

Other references