Bug 240488

Summary:	CVE-2007-1995 Quagga bgpd DoS
Product:	[Fedora] Fedora	Reporter:	Josh Bressers <bressers>
Component:	quagga	Assignee:	Martin Bacovsky <mbacovsk>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	6	CC:	mbacovsk
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:	impact=moderate,source=debian,reported=20070409,public=20070408
Fixed In Version:	0.99.7-1.fc7	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2007-07-03 16:24:29 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	240478

Description Josh Bressers 2007-05-17 19:52:36 UTC

This is the tracking bug for FC5/FC6, please see the blocks list

+++ This bug was initially created as a clone of Bug #240478 +++

An out of bounds memory read flaw was discovered in Quagga's bgpd.  This flaw
could crash the bgpd process.  The upstream bug has more information, including
the patch:

http://bugzilla.quagga.net/show_bug.cgi?id=354

Comment 1 Martin Bacovsky 2007-05-22 14:39:36 UTC

This issue should be fixed in quagga-0.99.7-1.fc6

Comment 2 Fedora Update System 2007-07-03 16:24:26 UTC

quagga-0.99.7-1.fc7 has been pushed to the Fedora 7 stable repository.  If problems still persist, please make note of it in this bug report.