bugtraq - [SECURITY] [DSA 2459-1] quagga security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Thu, 26 Apr 2012 07:56:28 +0200
From: Florian Weimer <fw@...eb.enyo.de>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 2459-1] quagga security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -------------------------------------------------------------------------
Debian Security Advisory DSA-2459-1                   security@...ian.org
http://www.debian.org/security/                            Florian Weimer
April 26, 2012                         http://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : quagga
Vulnerability  : several
Problem type   : remote
Debian-specific: no
CVE ID         : CVE-2012-0249 CVE-2012-0250 CVE-2012-0255

Several vulnerabilities have been discovered in Quagga, a routing
daemon.

CVE-2012-0249
	A buffer overflow in the ospf_ls_upd_list_lsa function in the
	OSPFv2 implementation allows remote attackers to cause a
	denial of service (assertion failure and daemon exit) via a
	Link State Update (aka LS Update) packet that is smaller than
	the length specified in its header.

CVE-2012-0250
	A buffer overflow in the OSPFv2 implementation allows remote
	attackers to cause a denial of service (daemon crash) via a
	Link State Update (aka LS Update) packet containing a
	network-LSA link-state advertisement for which the
	data-structure length is smaller than the value in the Length
	header field.

CVE-2012-0255
	The BGP implementation does not properly use message buffers
	for OPEN messages, which allows remote attackers impersonating
	a configured BGP peer to cause a denial of service (assertion
	failure and daemon exit) via a message associated with a
	malformed AS4 capability.

This security update upgrades the quagga package to the most recent
upstream release.  This release includes other corrections, such as
hardening against unknown BGP path attributes.

For the stable distribution (squeeze), these problems have been fixed
in version 0.99.20.1-0+squeeze1.

For the testing distribution (wheezy) and the unstable distribution
(sid), these problems have been fixed in version 0.99.20.1-1.

We recommend that you upgrade your quagga packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAEBAgAGBQJPmOgYAAoJEL97/wQC1SS+aH8H/jh5fp5jGA1G0/fnF6QOCAmi
dkPAk51Lf0V/yTf/W1qoN5rOJ9B1G1PP1QCOUUHPunuCSQvynXuPb0QMmOLvtAjb
+wlQX5EbdLrjcfc4Rer95dnZITU1uaCiTKw9aGRlOBMcu5jedG21Jks7vwWnBgCE
lL2RuBBk1Rut5YtXuuPZTgXae3BOjjUh7yNPy/cZ/AWf1T442KLaZRQhLwimBrco
S2PNHjeV+bPQUa5eKwE6OdWkNdZt85JcFzz13ojEMMxh/kPiJF7+guec8dIjHr+n
OyKytdhO/wm6lyBlR4BYryGW4U1AuuiTTGs0ldAIzUBzhlLTPLQWt+Te96TMbAw=
=7lac
-----END PGP SIGNATURE-----