Re: CVE Request: BGP protocol vulnerability

[Kurt Seifried <kurt () seifried org>]

> The BGP protocol and its various extensions require that BGP peering
> sessions are terminated when a peer receives a BGP update message
> which it considers semantically incorrect, leading to a persistent
> denial-of-service condition if the update is received again after the
> terminated session is reestablished.
>
> (This is not something new at all---we just need to get up, treat it
> as a vulnerability, and fix it.)

This sounds like CVE-2010-3035
http://www.cisco.com/warp/public/707/cisco-sa-20100827-bgp.shtml

or are you talking about another BGP issue? (but in the same "family"
as CVE-2009-2055 and  CVE-2010-3035).

-- 
Kurt Seifried
kurt () seifried org
tel: 1-703-879-3176