CVE-2007-1995: Quagga

Medium severity, CVSS 6.3. EPSS: 1.7% chance of exploitation in the next 30 days.

bgpd/bgp_attr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not validate length values in the MP_REACH_NLRI and MP_UNREACH_NLRI attributes, which allows remote attackers to cause a denial of service (daemon crash or exit) via crafted UPDATE messages that trigger an assertion error or out of bounds read.

Affected products

• Quagga Quagga: up to and including 0.98.6; version 0.95 only; version 0.96 only; version 0.96.1 only; version 0.96.2 only; version 0.96.3 only; …

Published 2007-04-12. Last modified 2026-06-16.