CVE-2010-1675

Description

bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (session reset) via a malformed AS_PATHLIMIT path attribute.

Link	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=654614
http://www.osvdb.org/71258	vdb entry
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html	vendor advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/66212	vdb entry
http://security.gentoo.org/glsa/glsa-201202-02.xml	vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html	vendor advisory
http://secunia.com/advisories/43770	third party advisory vendor advisory
http://secunia.com/advisories/48106	third party advisory
http://www.debian.org/security/2011/dsa-2197	vendor advisory
http://www.vupen.com/english/advisories/2011/0711	vdb entry vendor advisory
http://www.securityfocus.com/bid/46943	vdb entry
http://www.quagga.net/news2.php?y=2011&m=3&d=21#id1300723200
http://www.mandriva.com/security/advisories?name=MDVSA-2011:058	vendor advisory
http://secunia.com/advisories/43499	third party advisory vendor advisory

What is the severity of CVE-2010-1675?: CVE-2010-1675 has been scored as a medium severity vulnerability.
How to fix CVE-2010-1675?: To fix CVE-2010-1675, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2010-1675 being actively exploited in the wild?: It is possible that CVE-2010-1675 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~4% probability that this vulnerability will be exploited by malicious actors in the next 30 days.