CVE-2016-4049 — Improper Input Validation in Leap

CWE-20 — Improper Input Validation8 documents6 sources
Severity
7.5HIGHNVD
OSV5.5
EPSS
2.2%
top 15.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
QuaggaOpensuse LeapOpensuse
Timeline
PublishedMay 23
Latest updateMay 14

Description

The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of service (assertion failure and daemon crash) via a large BGP packet.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶Ubuntuquagga/quagga< 0.99.22.4-3ubuntu1.2+1
▶NVDopensuse/leap42.1

🔴Vulnerability Details

3
GHSA
GHSA-5crg-85w6-wxj6: The bgp_dump_routes_func function in bgpd/bgp_dump↗2022-05-14
▶
OSV
quagga vulnerabilities↗2016-10-13
▶
OSV
CVE-2016-4049: The bgp_dump_routes_func function in bgpd/bgp_dump↗2016-05-23
▶

📋Vendor Advisories

2
Ubuntu
Quagga vulnerabilities↗2016-10-13
▶
Red Hat
quagga: denial of service vulnerability in BGP routing daemon↗2016-04-27
▶

💬Community

2
Bugzilla
CVE-2016-4049 quagga: denial of service vulnerability in BGP routing daemon [fedora-all]↗2016-04-28
▶
Bugzilla
CVE-2016-4049 quagga: denial of service vulnerability in BGP routing daemon↗2016-04-28
▶