CVE-2007-4826: Quagga

Low severity, CVSS 3.5. EPSS: 1.7% chance of exploitation in the next 30 days.

bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service (crash) via a malformed (1) OPEN message or (2) a COMMUNITY attribute, which triggers a NULL pointer dereference. NOTE: vector 2 only exists when debugging is enabled.

Affected products

• Quagga Quagga: up to and including 0.99.8; version 0.95 only; version 0.96 only; version 0.96.1 only; version 0.96.2 only; version 0.96.3 only; …

Published 2007-09-12. Last modified 2026-06-16.