Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Ubuntu 20.04: USN-7017-1: Quagga Denial Of Service Advisory

ubuntu
Calendar Grey September 17, 2024
Scroller Ubuntu
A crafted network packet may trigger a failure in Quagga, leading to service interruptions on Ubuntu 20.04 LTS. It is advised to apply the latest updates.
Quagga could be made to crash if it received specially crafted network traffic.

Summary

Quagga could be made to crash if it received specially crafted network

traffic.

Software Description:

- quagga: BGP/OSPF/RIP routing daemon

Details:

Iggy Frankovic discovered that Quagga incorrectly handled certain BGP

messages. A remote attacker could possibly use this issue to cause Quagga

to crash, resulting in a denial of service.

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
   quagga                          1.2.4-4ubuntu0.5
   quagga-bgpd                     1.2.4-4ubuntu0.5

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7017-1

CVE-2024-44070

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7017-1

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.