Home

CVE-2016-2342

Description

The bgp_nlri_parse_vpnv4 function in bgp_mplsvpn.c in the VPNv4 NLRI parser in bgpd in Quagga before 1.0.20160309, when a certain VPNv4 configuration is used, relies on a Labeled-VPN SAFI routes-data length field during a data copy, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted packet.

Risk Information

Base Score
8.1
MODERATE
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
20.441

Associated Vulnerability

VulnerabilityOS Platform
BGP/OSPF/RIP routing daemon (USN-2941-1) quagga_0.99.22.4-3ubuntu1.1_i386.debLinux
BGP/OSPF/RIP routing daemon (USN-2941-1) quagga_0.99.22.4-3ubuntu1.1_amd64.debLinux
BGP/OSPF/RIP routing daemon (USN-2941-1) quagga_0.99.24.1-2ubuntu0.1_i386.debLinux
BGP/OSPF/RIP routing daemon (USN-2941-1) quagga_0.99.24.1-2ubuntu0.1_amd64.debLinux
BGP/OSPF/RIP routing daemon (USN-2941-1) quagga_0.99.20.1-0ubuntu0.12.04.4_i386.debLinux
BGP/OSPF/RIP routing daemon (USN-2941-1) quagga_0.99.20.1-0ubuntu0.12.04.4_amd64.debLinux
quagga security update(DSA-3532-1) quagga_0.99.23.1-1+deb8u1_amd64.debLinux
(RHSA-2017:0794) Moderate: quagga security and bug fix update quagga-0.99.15-14.el6.i686.rpmLinux
(RHSA-2017:0794) Moderate: quagga security and bug fix update quagga-0.99.15-14.el6.x86_64.rpmLinux
(RHSA-2017:0794) Moderate: quagga security and bug fix update quagga-contrib-0.99.15-14.el6.i686.rpmLinux
(RHSA-2017:0794) Moderate: quagga security and bug fix update quagga-contrib-0.99.15-14.el6.x86_64.rpmLinux
(RHSA-2017:0794) Moderate: quagga security and bug fix update quagga-devel-0.99.15-14.el6.i686.rpmLinux
(RHSA-2017:0794) Moderate: quagga security and bug fix update quagga-devel-0.99.15-14.el6.x86_64.rpmLinux
Quagga update (ELSA-2017-0794) quagga-0.99.15-14.el6.x86_64.rpmLinux
Quagga-contrib update (ELSA-2017-0794) quagga-contrib-0.99.15-14.el6.x86_64.rpmLinux
Quagga-devel update (ELSA-2017-0794) quagga-devel-0.99.15-14.el6.x86_64.rpmLinux
Quagga update (ELSA-2017-0794) quagga-0.99.15-14.el6.i686.rpmLinux
Quagga-contrib update (ELSA-2017-0794) quagga-contrib-0.99.15-14.el6.i686.rpmLinux
Quagga-devel update (ELSA-2017-0794) quagga-devel-0.99.15-14.el6.i686.rpmLinux
(CESA-2017:0794) Moderate: quagga security and bug fix update quagga-0.99.15-14.el6.i686.rpmLinux
(CESA-2017:0794) Moderate: quagga security and bug fix update quagga-contrib-0.99.15-14.el6.i686.rpmLinux
(CESA-2017:0794) Moderate: quagga security and bug fix update quagga-devel-0.99.15-14.el6.i686.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234