The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a message associated with a malformed Four-octet AS Number Capability (aka AS4 capability).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade quagga | Aug 30, 2017 | Apr 5, 2012 |
| Centos_linux | — | Upgrade quagga-develUpgrade quagga-contribUpgrade quagga | Dec 1, 2016 | Apr 5, 2012 |
| Freebsd | — | Upgrade quaggaUpgrade quagga-re | Dec 10, 2025 | Mar 24, 2012 |
| Gentoo Linux | — | Upgrade net-misc/quagga. | Oct 30, 2017 | Apr 5, 2012 |
| Oracle Solaris | — | Upgrade system/network/routing/quagga to version 0.99.19-0.175.0.10.0.1.0 on Solaris 11.0 | May 29, 2017 | Apr 5, 2012 |
| Oracle_linux | — | Upgrade quagga-develUpgrade quagga-contribUpgrade quagga | Mar 28, 2017 | Apr 5, 2012 |
| Suse | — | Upgrade quagga-develUpgrade quagga | Dec 12, 2013 | Apr 5, 2012 |
| Ubuntu | — | Upgrade quagga | Nov 8, 2024 | Apr 5, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub