Fedora 25: Critical Quagga Memory Issue Fix - CVE-2017-5495
fedora
February 9, 2017
Fix for CVE-2017-5495
Summary
Quagga is free software that operates TCP/IP-based routing protocols. It takes
a multi-server and multi-threaded approach to resolving the current complexity
of the Internet.
Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS (experimental), OSPFv2,
OSPFv3, RIPv1, RIPv2, and RIPng.
Quagga is intended to be used as a Route Server and a Route Reflector. It is
not a toolkit; it provides full routing power under a new architecture.
Quagga by design has a process for each protocol.
Quagga is a fork of GNU Zebra.
Update Information:
Fix for CVE-2017-5495
Topics Covered
Change Log
References
[ 1 ] Bug #1416017 - CVE-2017-5495 quagga: Telnet interface input buffer allocates unbounded amounts of memory [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1416017
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade quagga' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Name: quagga
Product: Fedora 25
Version: 0.99.24.1
Release: 5.fc25
URL: Summary : Routing daemon
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!