Detections
Analytics
SuSE 10 Security Update : quagga (ZYPP Patch Number 7355)
medium Nessus Plugin ID 53255
Language:
Synopsis
The remote SuSE 10 host is missing a security-related patch.Description
This security update of quagga fixes :- Direct BGP peers can send malformed extended communities which lead to a NULL pointer dereference.
(CVE-2010-1674)
- A malformed AS_PATHLIMIT path attribute will cause a session reset in Quagga. This malformed package is forwarded by other routers and can be used to take 'all' Quagga routers off the Internet with one single announcement. (feature removed). (CVE-2010-1675)
- CVE-2010-2948: CVSS v2 Base Score: 5.4 (AV:A/AC:M/Au:N/C:P/I:P/A:P): Buffer Errors (CWE-119)
- CVE-2010-2949: CVSS v2 Base Score: 1.8 (AV:A/AC:H/Au:N/C:N/I:N/A:P)
Solution
Apply ZYPP patch number 7355.See Also
http://support.novell.com/security/cve/CVE-2010-1674.html
http://support.novell.com/security/cve/CVE-2010-1675.html
Plugin Details
Severity: Medium
ID: 53255
File Name: suse_quagga-7355.nasl
Version: 1.7
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 4/1/2011
Updated: 1/19/2021
Supported Sensors: Continuous Assessment, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 6.5
Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/o:suse:suse_linux
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Patch Publication Date: 2/28/2011
Reference Information
CVE: CVE-2010-1674, CVE-2010-1675, CVE-2010-2948, CVE-2010-2949
CWE: 119