USN-3471-1

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/notices/USN-3471-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3471-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-3471-1
Related
Published
2017-10-31T18:10:28.629949Z
Modified
2017-10-31T18:10:28.629949Z
Summary
quagga vulnerabilities
Details

Andreas Jaggi discovered that Quagga incorrectly handled certain BGP UPDATE messages. A remote attacker could possibly use this issue to cause Quagga to crash, resulting in a denial of service. (CVE-2017-16227)

Quentin Young discovered that Quagga incorrectly handled memory in the telnet vty CLI. An attacker able to connect to the telnet interface could possibly use this issue to cause Quagga to consume memory, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2017-5495)

References

Affected packages

Ubuntu:14.04:LTS / quagga

Package

Name
quagga
Purl
pkg:deb/ubuntu/quagga?arch=src?distro=trusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.99.22.4-3ubuntu1.4

Affected versions

0.*

0.99.22.1-2
0.99.22.4-1
0.99.22.4-2
0.99.22.4-3
0.99.22.4-3ubuntu1
0.99.22.4-3ubuntu1.1
0.99.22.4-3ubuntu1.2
0.99.22.4-3ubuntu1.3

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "0.99.22.4-3ubuntu1.4",
            "binary_name": "quagga"
        },
        {
            "binary_version": "0.99.22.4-3ubuntu1.4",
            "binary_name": "quagga-dbg"
        },
        {
            "binary_version": "0.99.22.4-3ubuntu1.4",
            "binary_name": "quagga-dbgsym"
        },
        {
            "binary_version": "0.99.22.4-3ubuntu1.4",
            "binary_name": "quagga-doc"
        }
    ]
}

Ubuntu:16.04:LTS / quagga

Package

Name
quagga
Purl
pkg:deb/ubuntu/quagga?arch=src?distro=xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.99.24.1-2ubuntu1.3

Affected versions

0.*

0.99.24.1-2
0.99.24.1-2ubuntu1
0.99.24.1-2ubuntu1.1
0.99.24.1-2ubuntu1.2

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "0.99.24.1-2ubuntu1.3",
            "binary_name": "quagga"
        },
        {
            "binary_version": "0.99.24.1-2ubuntu1.3",
            "binary_name": "quagga-dbg"
        },
        {
            "binary_version": "0.99.24.1-2ubuntu1.3",
            "binary_name": "quagga-dbgsym"
        },
        {
            "binary_version": "0.99.24.1-2ubuntu1.3",
            "binary_name": "quagga-doc"
        }
    ]
}