APP: Quagga BGP Update Denial Of Service
This signature detects attempts to exploit a known vulnerability against Quagga, an open source network routing software. A successful attack can result in a denial-of-service condition.
Extended Description
The aspath_put function in bgpd/bgp_aspath.c in Quagga before 1.2.2 allows remote attackers to cause a denial of service (session drop) via BGP UPDATE messages, because AS_PATH size calculation for long paths counts certain bytes twice and consequently constructs an invalid message.
Affected Products
Quagga quagga
Short Name
APP:MISC:QUAGGA-BGP-DOS
Severity
Minor
Recommended
True
Recommended Action
Drop
Category
APP
Keywords
BGP CVE-2017-16227 Denial Of Quagga Service Update
Release Date
01/23/2018
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3590
Port
TCP/179
False Positive
Unknown
Vendors
Quagga
Debian
CVSS Score
5.0