Lucene search

K
prionPRIOn knowledge basePRION:CVE-2012-0255
HistoryApr 05, 2012 - 1:25 p.m.

Design/Logic Flaw

2012-04-0513:25:00
PRIOn knowledge base
www.prio-n.com
1

6.9 Medium

AI Score

Confidence

High

0.028 Low

EPSS

Percentile

90.7%

The BGP implementation in bgpd in Quagga before 0.99.20.1 does not properly use message buffers for OPEN messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a message associated with a malformed Four-octet AS Number Capability (aka AS4 capability).