Ubuntu 12.04 LTS: USN-1605-1 High: Quagga Denial Of Service

ubuntu

October 11, 2012

Quagga could be made to crash if it received specially crafted network traffic.

Summary

Quagga could be made to crash if it received specially crafted network

traffic.

Software Description:

- quagga: BGP/OSPF/RIP routing daemon

Details:

It was discovered that Quagga incorrectly handled certain malformed

messages. A remote attacker could use this flaw to cause Quagga to crash,

resulting in a denial of service.

Topics Covered

security advisory denial of service software update quagga ubuntu network threat

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  quagga                          0.99.20.1-0ubuntu0.12.04.3

Ubuntu 11.10:
  quagga                          0.99.20.1-0ubuntu0.11.10.3

Ubuntu 11.04:
  quagga                          0.99.20.1-0ubuntu0.11.04.3

Ubuntu 10.04 LTS:
  quagga                          0.99.20.1-0ubuntu0.10.04.3

After a standard system update you need to restart Quagga to make all the
necessary changes.