CVE-2009-0780: OpenBSD

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

The aspath_prepend function in rde_attr.c in bgpd in OpenBSD 4.3 and 4.4 allows remote attackers to cause a denial of service (application crash) via an Autonomous System (AS) advertisement containing a long AS path.

Affected products

• OpenBSD OpenBSD: version 4.3 only; version 4.4 only

Published 2009-03-04. Last modified 2026-06-16.