VDB
CVE-2009-1572
CVE-2009-1572
PUBLISHED
CVSS 5 MEDIUM
The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error.
EPSS 3.52% · 89.1th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
3.52%
89.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| quagga | quagga | 0.97.1, 0, 0.95 |
| n/a | n/a | n/a |
Timeline
- Apr 30, 2009 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 5, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
- Nov 3, 2023 EPSS Score
References
- 54200 vdb
- 35203 third-party-advisory
- 34999 third-party-advisory
- MDVSA-2009:109 vendor-advisory
- USN-775-1 vendor-advisory
- DSA-1788 vendor-advisory
- quagga-systemnumber-dos(50317) vdb
- 35685 third-party-advisory
- FEDORA-2009-5324 vendor-advisory
- 35061 third-party-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526311 url
- FEDORA-2009-5284 vendor-advisory
- 34817 vdb
- 1022164 vdb
- [oss-security] 20090501 CVE request (sort of): Quagga BGP crasher mailing-list
- [quagga-dev] 20090203 [quagga-dev 6391] [PATCH] BGP 4-byte ASN bug fixes mailing-list
- http://thread.gmane.org/gmane.network.quagga.devel/6513 url
- SUSE-SR:2009:012 vendor-advisory
- [oss-security] 20090501 Re: CVE request (sort of): Quagga BGP crasher mailing-list
- https://nvd.nist.gov/vuln/detail/CVE-2009-1572 advisory