[ GLSA 201610-03 ] Quagga

[GLSA]

Gentoo Linux Security Advisory

Title: Quagga: Arbitrary code execution (GLSA 201610-03)
Severity: high
Exploitable: remote
Date: October 10, 2016
Bug(s): #577156
ID: 201610-03

Synopsis

A buffer overflow in Quagga might allow remote attackers to execute
arbitrary code.


Background

Quagga is a free routing daemon replacing Zebra supporting RIP, OSPF and
BGP.


Affected Packages

Package: net-misc/quagga
Vulnerable: < 1.0.20160315
Unaffected: >= 1.0.20160315
Architectures: All supported architectures


Description

A memcpy function in the VPNv4 NLRI parser of bgp_mplsvpn.c does not
properly check the upper-bound length of received Labeled-VPN SAFI routes
data, which may allow for arbitrary code execution on the stack.


Impact

A remote attacker could send a specially crafted packet, possibly
resulting in execution of arbitrary code with the privileges of the
process or a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All Quagga users should upgrade to the latest version: