CVE-2006-2276

Description

bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service (CPU consumption) via a certain sh ip bgp command entered in the telnet interface.

How to fix CVE-2006-2276

To remediate CVE-2006-2276, upgrade the affected package to a fixed version below.

• Debian/quagga—upgrade to 0.99.4-1 or later

Is CVE-2006-2276 being exploited?

Low — EPSS is 0.1%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 0.99.4-1

References (19)

• ADVISORYpatches.sgi.com/support/free/security/advisories/20060602-01-U.asc
• ADVISORYsecunia.com/advisories/20116
• ADVISORYsecunia.com/advisories/20137
• ADVISORYsecunia.com/advisories/20138
• ADVISORYsecunia.com/advisories/20221