The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering (ORF) capability TLV in an OPEN message.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade quagga | Aug 30, 2017 | Jun 13, 2012 |
| Centos_linux | — | Upgrade quagga-contribUpgrade quagga-develUpgrade quagga | Dec 1, 2016 | Jun 13, 2012 |
| Freebsd | — | Upgrade quagga-reUpgrade quagga | Dec 10, 2025 | Jun 5, 2012 |
| Gentoo Linux | — | Upgrade net-misc/quagga. | Oct 30, 2017 | Jun 13, 2012 |
| Oracle Solaris | — | Upgrade system/network/routing/quagga to version 0.99.19-0.175.0.10.0.1.0 on Solaris 11.0 | May 29, 2017 | Jun 13, 2012 |
| Oracle_linux | — | Upgrade quaggaUpgrade quagga-contribUpgrade quagga-devel | Mar 28, 2017 | Jun 13, 2012 |
| Suse | — | Upgrade quaggaUpgrade quagga-devel | Dec 12, 2013 | Jun 13, 2012 |
| Ubuntu | — | Upgrade quagga | Nov 8, 2024 | Jun 13, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub