fkie_cve-2012-1820
Vulnerability from fkie_nvd
Published
2012-06-13 15:55
Modified
2025-04-11 00:51
Severity ?
Summary
The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering (ORF) capability TLV in an OPEN message.
References
cret@cert.orghttp://rhn.redhat.com/errata/RHSA-2012-1259.html
cret@cert.orghttp://secunia.com/advisories/50941
cret@cert.orghttp://www.debian.org/security/2012/dsa-2497
cret@cert.orghttp://www.kb.cert.org/vuls/id/962587US Government Resource
cret@cert.orghttp://www.securityfocus.com/bid/53775
cret@cert.orghttp://www.ubuntu.com/usn/USN-1605-1
af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2012-1259.html
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/50941
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2012/dsa-2497
af854a3a-2127-422b-91ae-364da2661108http://www.kb.cert.org/vuls/id/962587US Government Resource
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/53775
af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/USN-1605-1
Impacted products
Vendor Product Version
quagga quagga *
quagga quagga 0.95
quagga quagga 0.96
quagga quagga 0.96.1
quagga quagga 0.96.2
quagga quagga 0.96.3
quagga quagga 0.96.4
quagga quagga 0.96.5
quagga quagga 0.97.0
quagga quagga 0.97.1
quagga quagga 0.97.2
quagga quagga 0.97.3
quagga quagga 0.97.4
quagga quagga 0.97.5
quagga quagga 0.98.0
quagga quagga 0.98.1
quagga quagga 0.98.2
quagga quagga 0.98.3
quagga quagga 0.98.4
quagga quagga 0.98.5
quagga quagga 0.98.6
quagga quagga 0.99.1
quagga quagga 0.99.2
quagga quagga 0.99.3
quagga quagga 0.99.4
quagga quagga 0.99.5
quagga quagga 0.99.6
quagga quagga 0.99.7
quagga quagga 0.99.8
quagga quagga 0.99.9
quagga quagga 0.99.10
quagga quagga 0.99.11
quagga quagga 0.99.12
quagga quagga 0.99.13
quagga quagga 0.99.14
quagga quagga 0.99.15
quagga quagga 0.99.16
quagga quagga 0.99.17
quagga quagga 0.99.18
quagga quagga 0.99.19
quagga quagga 0.99.20


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:quagga:quagga:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "531EE994-CDC0-40E9-8B3C-1C11EC5CAB14",
              "versionEndIncluding": "0.99.20.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.95:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD7A8AD5-A315-4242-960C-05E792B30547",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.96:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B83BCE2-24D0-4B5B-A034-62BFF1894AE2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.96.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "FDD63DD9-1809-4CEC-AB69-955A7B127CA8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.96.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "0A2AD1AD-DDE2-477B-8EFD-767B6FD8EDBB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.96.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "99BD881B-9B53-4E12-B083-87C9C87CDF62",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.96.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "F910313F-FFE1-470A-A9B6-8A854C73DC97",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.96.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "9B0A9232-968D-4D3E-82A0-F5CC858EAF48",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.97.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD5F4CFB-BE1F-4424-8D2F-B921704E3AA0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.97.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "3A55FF13-8E56-4A27-B7FD-A855735E1045",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.97.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "F7DDBC3B-99BB-4404-9A73-90ED6581D69A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.97.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "AB09A713-E91E-44E7-8B82-F70F655A97B1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.97.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "10173750-690B-4576-AB3F-11A0861AA78B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.97.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "0EF8693A-D561-4D2E-BD60-5630601C6A94",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.98.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "BE43983A-73CB-41A5-889B-1AEA9A27F440",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.98.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "6EB589E9-85C0-4E87-856B-A2832383B129",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.98.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "7CF5EB8A-8E46-4490-BA88-03D4BED3EB84",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.98.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "C6445BEF-245C-47CE-9779-96C97CFD4DA7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.98.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "48D007FD-C1AD-477E-9AA5-DDB4522D3248",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.98.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "D6ADB9F6-B519-45D0-966F-F095372FBB49",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.98.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "6E914BAF-2E3A-415E-BAA7-FA02B4A22E25",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "55FCB7EC-8060-434B-B485-0DC7DBFE117D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "9524E069-2A80-4068-9945-2752EF2126EB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "9E1B30CC-478C-4BD1-AF4C-D126B8CCE8D6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "1D713119-F9C6-4656-92C9-A5B863A4B72F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A5E99C8-3778-416B-915F-7335C72435B2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "578DCE6D-3360-43DA-B22E-E0005A6AF388",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4D7B93B-0CF5-4CAF-B1F4-8A816A427BC7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "5FDAF214-1851-4DFC-ACAA-37D8CD83D323",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "B41BBCA6-237B-4CB6-9208-571D47251E18",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "FD6CAB29-56F9-4C54-97D8-CBB338658EB0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "C69C603A-34A1-4EF9-A332-6984928BF72C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "E8814493-75B4-45DD-886B-054A1C27F870",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "E98DCCDE-2800-4FC5-BE49-3EC7583F9768",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "EF2C126C-075D-42F0-B9DD-95267D14C818",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "62379505-A869-48AA-8A32-768583F12266",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "737C92B8-185F-4049-A7F4-D9D4DA6DDFDC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "1FF1EAD6-1BAF-4D5E-BEB1-BC433041482D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "B344123D-1D1D-41B0-BEF5-D3A5A4995B79",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.19:*:*:*:*:*:*:*",
              "matchCriteriaId": "809D464E-8F60-44E3-8BEB-97760500B508",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:quagga:quagga:0.99.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "01FB6EAC-E9B7-49C6-9F78-10E2EA1BB8F6",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering (ORF) capability TLV in an OPEN message."
    },
    {
      "lang": "es",
      "value": "La funci\u00f3n bgp_capability_orf de bgpd de Quagga 0.99.20.1 y anteriores permite a atacantes remotos provocar una denegaci\u00f3n de servicio (fallo de aserci\u00f3n y finalizaci\u00f3n del demonio) bas\u00e1ndose en una relaci\u00f3n \"BGP peering\" y enviando informaci\u00f3n mal formada de \"Outbound Route Filtering (ORF) capability TLV\" en un mensaje OPEN."
    }
  ],
  "id": "CVE-2012-1820",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "ADJACENT_NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 2.9,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:A/AC:M/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 5.5,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2012-06-13T15:55:01.057",
  "references": [
    {
      "source": "cret@cert.org",
      "url": "http://rhn.redhat.com/errata/RHSA-2012-1259.html"
    },
    {
      "source": "cret@cert.org",
      "url": "http://secunia.com/advisories/50941"
    },
    {
      "source": "cret@cert.org",
      "url": "http://www.debian.org/security/2012/dsa-2497"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/962587"
    },
    {
      "source": "cret@cert.org",
      "url": "http://www.securityfocus.com/bid/53775"
    },
    {
      "source": "cret@cert.org",
      "url": "http://www.ubuntu.com/usn/USN-1605-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2012-1259.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/50941"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2012/dsa-2497"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/962587"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/53775"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-1605-1"
    }
  ],
  "sourceIdentifier": "cret@cert.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.