Unrated severityNVD Advisory· Published Apr 12, 2007· Updated Jun 16, 2026
CVE-2007-1995
CVE-2007-1995
Description
bgpd/bgp_attr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not validate length values in the MP_REACH_NLRI and MP_UNREACH_NLRI attributes, which allows remote attackers to cause a denial of service (daemon crash or exit) via crafted UPDATE messages that trigger an assertion error or out of bounds read.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
23cpe:2.3:a:quagga:quagga:*:*:*:*:*:*:*:*+ 20 more
- cpe:2.3:a:quagga:quagga:*:*:*:*:*:*:*:*range: <=0.98.6
- cpe:2.3:a:quagga:quagga:0.95:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.96:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.96.1:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.96.2:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.96.3:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.96.4:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.96.5:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.97.0:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.97.1:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.97.2:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.97.3:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.97.4:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.97.5:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.98.0:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.98.1:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.98.2:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.98.3:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.98.4:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.98.5:*:*:*:*:*:*:*
- (no CPE)range: <=0.98.6, <=0.99.6
- osv-coords2 versions
< 0.99.6-5+ 1 more
- (no CPE)range: < 0.99.6-5
- (no CPE)range: < 1.2.4-2.14
Patches
Vulnerability mechanics
References
26- secunia.com/advisories/24808nvdVendor Advisory
- secunia.com/advisories/25084nvdVendor Advisory
- secunia.com/advisories/25119nvdVendor Advisory
- secunia.com/advisories/25255nvdVendor Advisory
- secunia.com/advisories/25293nvdVendor Advisory
- secunia.com/advisories/25312nvdVendor Advisory
- secunia.com/advisories/25428nvdVendor Advisory
- secunia.com/advisories/29743nvdVendor Advisory
- www.vupen.com/english/advisories/2007/1336nvdVendor Advisory
- www.vupen.com/english/advisories/2008/1195/referencesnvdVendor Advisory
- bugzilla.quagga.net/show_bug.cginvd
- bugzilla.quagga.net/show_bug.cginvd
- security.gentoo.org/glsa/glsa-200705-05.xmlnvd
- sunsolve.sun.com/search/document.donvd
- www.debian.org/security/2007/dsa-1293nvd
- www.mandriva.com/security/advisoriesnvd
- www.novell.com/linux/security/advisories/2007_9_sr.htmlnvd
- www.openpkg.com/security/advisories/OpenPKG-SA-2007.015.htmlnvd
- www.quagga.net/news2.phpnvd
- www.redhat.com/support/errata/RHSA-2007-0389.htmlnvd
- www.securityfocus.com/bid/23417nvd
- www.securitytracker.com/idnvd
- www.trustix.org/errata/2007/0017/nvd
- www.ubuntu.com/usn/usn-461-1nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/33547nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11048nvd
News mentions
0No linked articles in our index yet.