CVE-2012-0255 - CVE House
Back to Database
Status published Medium CVE-2012-0255

The BGP implementation in bgpd in Quagga before 0.99.20.1 does...

Vulnerability Description

The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a message associated with a malformed Four-octet AS Number Capability (aka AS4 capability).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-0255

Credits & Attribution

No credits recorded in the NVD database.

References

More from quagga

View All →
CVE-2021-44038
An issue was discovered in Quagga through 1.2.4. Unsafe chown/chmod...
High 7.8
CVE-2017-5495
All versions of Quagga, 0.93 through 1.1.0, are vulnerable to...
High 7.5
CVE-2017-16227
The aspath_put function in bgpd/bgp_aspath.c in Quagga before 1.2.2 allows...
High 7.5
CVE-2016-4049
The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform...
High 7.5
CVE-2016-2342
The bgp_nlri_parse_vpnv4 function in bgp_mplsvpn.c in the VPNv4 NLRI parser...
High 8.1

Affected Vendor

Affected Software

quagga
Vulnerable Versions:
0, 0.95, 0.96, 0.96.1, 0.96.2, 0.96.3, 0.96.4, 0.96.5, 0.97.0, 0.97.1, 0.97.2, 0.97.3, 0.97.4, 0.97.5, 0.98.0, 0.98.1, 0.98.2, 0.98.3, 0.98.4, 0.98.5, 0.98.6, 0.99.1, 0.99.2, 0.99.3, 0.99.4, 0.99.5, 0.99.6, 0.99.7, 0.99.8, 0.99.9, 0.99.10, 0.99.11, 0.99.12, 0.99.13, 0.99.14, 0.99.15, 0.99.16, 0.99.17, 0.99.18, 0.99.19

Timeline

Official Publish: April 5th, 2012
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.