https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T07:32:36.253940+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2017-16227 CVE-2017-16227 2026-10-09T07:32:36.293346+00:00

The aspath_put function in bgpd/bgp_aspath.c in Quagga before 1.2.2 allows remote attackers to cause a denial of service (session drop) via BGP UPDATE messages, because AS_PATH size calculation for long paths counts certain bytes twice and consequently constructs an invalid message.

 https://cve.radiocsirt.org/vuln/usn-3471-1 USN-3471-1 — quagga vulnerabilities 2026-10-09T07:32:36.293404+00:00

Affected: Ubuntu:14.04:LTS: quagga, Ubuntu:16.04:LTS: quagga

Andreas Jaggi discovered that Quagga incorrectly handled certain BGP UPDATE messages. A remote attacker could possibly use this issue to cause Quagga to crash, resulting in a denial of service. (CVE-2017-16227)

Quentin Young discovered that Quagga incorrectly handled memory in the telnet vty CLI. An attacker able to connect to the telnet interface could possibly use this issue to cause Quagga to consume memory, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2017-5495)