CVE-2007-4826

Description

bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service (crash) via a malformed (1) OPEN message or (2) a COMMUNITY attribute, which triggers a NULL pointer dereference. NOTE: vector 2 only exists when debugging is enabled.

3.5

CVSS

Severity: Low

CVSS 2.0 •

EPSS 1.26% Top 25%

Vendor Advisory sun.com Vendor Advisory trustix.org Vendor Advisory fedoranews.org Vendor Advisory redhat.com Vendor Advisory ubuntu.com Vendor Advisory mandriva.com Vendor Advisory debian.org Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory vupen.com Vendor Advisory vupen.com

Affected: n/a n/a

References

Link	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilities/36551	vdb entry
http://quagga.net/news2.php?y=2007&m=9&d=7#id1189190760	patch
http://www.quagga.net/download/quagga-0.99.9.changelog.txt
http://www.vupen.com/english/advisories/2008/1195/references	vdb entry vendor advisory
http://secunia.com/advisories/26744	third party advisory patch vendor advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-236141-1	vendor advisory
http://www.vupen.com/english/advisories/2007/3129	vdb entry vendor advisory
http://secunia.com/advisories/26863	third party advisory vendor advisory
http://www.trustix.org/errata/2007/0028/	vendor advisory
http://fedoranews.org/updates/FEDORA-2007-219.shtml	vendor advisory
http://secunia.com/advisories/29743	third party advisory vendor advisory
http://secunia.com/advisories/26829	third party advisory vendor advisory
http://www.redhat.com/support/errata/RHSA-2010-0785.html	vendor advisory
http://www.ubuntu.com/usn/usn-512-1	vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:182	vendor advisory
http://www.debian.org/security/2007/dsa-1382	vendor advisory
http://www.securityfocus.com/bid/25634	vdb entry patch
http://lists.debian.org/debian-security-announce/debian-security-announce-2007/msg00153.html	mailing list
http://secunia.com/advisories/27049	third party advisory vendor advisory

Frequently Asked Questions

What is the severity of CVE-2007-4826?: CVE-2007-4826 has been scored as a low severity vulnerability.
How to fix CVE-2007-4826?: To fix CVE-2007-4826, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2007-4826 being actively exploited in the wild?: It is possible that CVE-2007-4826 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~1% probability that this vulnerability will be exploited by malicious actors in the next 30 days.