Unrated severityNVD Advisory· Published Sep 10, 2010· Updated Apr 29, 2026
CVE-2010-2948
CVE-2010-2948
Description
Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a malformed Outbound Route Filtering (ORF) record in a BGP ROUTE-REFRESH (RR) message.
Affected products
36cpe:2.3:a:quagga:quagga:*:*:*:*:*:*:*:*+ 35 more
- cpe:2.3:a:quagga:quagga:*:*:*:*:*:*:*:*range: <=0.99.16
- cpe:2.3:a:quagga:quagga:0.95:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.96:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.96.1:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.96.2:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.96.3:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.96.4:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.96.5:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.97.0:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.97.1:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.97.2:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.97.3:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.97.4:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.97.5:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.98.0:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.98.1:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.98.2:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.98.3:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.98.4:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.98.5:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.98.6:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.99.1:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.99.10:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.99.11:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.99.12:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.99.13:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.99.14:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.99.15:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.99.2:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.99.3:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.99.4:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.99.5:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.99.6:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.99.7:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.99.8:*:*:*:*:*:*:*
- cpe:2.3:a:quagga:quagga:0.99.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
23- secunia.com/advisories/41038nvdVendor Advisory
- secunia.com/advisories/41238nvdVendor Advisory
- secunia.com/advisories/42446nvdVendor Advisory
- secunia.com/advisories/42498nvdVendor Advisory
- www.vupen.com/english/advisories/2010/2304nvdVendor Advisory
- www.vupen.com/english/advisories/2010/3124nvdVendor Advisory
- code.quagga.netnvd
- lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.htmlnvd
- secunia.com/advisories/42397nvd
- secunia.com/advisories/48106nvd
- security.gentoo.org/glsa/glsa-201202-02.xmlnvd
- www.debian.org/security/2010/dsa-2104nvd
- www.mandriva.com/security/advisoriesnvd
- www.openwall.com/lists/oss-security/2010/08/24/3nvd
- www.openwall.com/lists/oss-security/2010/08/25/4nvd
- www.quagga.net/news2.phpnvd
- www.redhat.com/support/errata/RHSA-2010-0785.htmlnvd
- www.redhat.com/support/errata/RHSA-2010-0945.htmlnvd
- www.securityfocus.com/bid/42635nvd
- www.ubuntu.com/usn/USN-1027-1nvd
- www.vupen.com/english/advisories/2010/3097nvd
- bugzilla.redhat.com/show_bug.cginvd
News mentions
0No linked articles in our index yet.