oss-sec mailing list archives

CVE request (sort of): Quagga BGP crasher

From: Florian Weimer <fw () deneb enyo de>
Date: Fri, 01 May 2009 11:02:16 +0200

There's a crasher bug in Quagga's bgpd which can allegedly be
triggered by routes present in the global table.  See:

  <http://thread.gmane.org/gmane.network.quagga.devel/6513>

I think we need a CVE for that, but I don't understand the problem yet
(and I can't reproduce it), so I can't come up with a concise
vulnerability description.

Current thread:

CVE request (sort of): Quagga BGP crasher Florian Weimer (May 01)
- Re: CVE request (sort of): Quagga BGP crasher Jon Oberheide (May 01)
  - Re: CVE request (sort of): Quagga BGP crasher Florian Weimer (May 01)
    - Re: CVE request (sort of): Quagga BGP crasher Florian Weimer (May 04)
- Re: CVE request (sort of): Quagga BGP crasher Steven M. Christey (May 06)