Vulnerability Details CVE-2009-0780
The aspath_prepend function in rde_attr.c in bgpd in OpenBSD 4.3 and 4.4 allows remote attackers to cause a denial of service (application crash) via an Autonomous System (AS) advertisement containing a long AS path.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 77.7%
CVSS Severity
CVSS v2 Score 5.0
References
- http://openbsd.org/errata43.html#010_bgpd
- http://openbsd.org/errata44.html#010_bgpd
- http://osvdb.org/52271
- http://secunia.com/advisories/33975
- http://www.securityfocus.com/bid/33828
- http://www.securitytracker.com/id?1021736
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48812
- http://openbsd.org/errata43.html#010_bgpd
- http://openbsd.org/errata44.html#010_bgpd
- http://osvdb.org/52271
- http://secunia.com/advisories/33975
- http://www.securityfocus.com/bid/33828
- http://www.securitytracker.com/id?1021736
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48812