CVE-2010-2948
Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in...
CVE-2010-2948 is a medium vulnerability (CVSS 6.5) in Quagga, published September 6, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.04%, the 90th percentile. No source names a fixed version.
- Severity
- 6.5 MediumCVSS 2.0, NVD
- Exploit chance
- 4.04%EPSS, 90th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a malformed Outbound Route Filtering (ORF) record in a BGP ROUTE-REFRESH (RR) message.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
quaggaDebian:5.0 From an advisory covering 2 CVEs | before 0.99.10-1lenny3, plus listed versions 0.99.10-1lenny10.99.10-1lenny2 | 0.99.10-1lenny3 |
quaggaRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:0.98.3-4.el4_8.1 | 0:0.98.3-4.el4_8.1 |
quagga-contribRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:0.98.3-4.el4_8.1 | 0:0.98.3-4.el4_8.1 |
quagga-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:0.98.3-4.el4_8.1 | 0:0.98.3-4.el4_8.1 |
quagga-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:0.98.3-4.el4_8.1 | 0:0.98.3-4.el4_8.1 |
quaggaRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:0.98.3-4.el4_8.1 | 0:0.98.3-4.el4_8.1 |
quagga-contribRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:0.98.3-4.el4_8.1 | 0:0.98.3-4.el4_8.1 |
quagga-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:0.98.3-4.el4_8.1 | 0:0.98.3-4.el4_8.1 |
quagga-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:0.98.3-4.el4_8.1 | 0:0.98.3-4.el4_8.1 |
quaggaRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:0.98.3-4.el4_8.1 | 0:0.98.3-4.el4_8.1 |
Show 25 moreShow less
| Package | Affected | Fixed |
|---|---|---|
quagga-contribRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:0.98.3-4.el4_8.1 | 0:0.98.3-4.el4_8.1 |
quagga-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:0.98.3-4.el4_8.1 | 0:0.98.3-4.el4_8.1 |
quagga-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:0.98.3-4.el4_8.1 | 0:0.98.3-4.el4_8.1 |
quaggaRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:0.98.3-4.el4_8.1 | 0:0.98.3-4.el4_8.1 |
quagga-contribRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:0.98.3-4.el4_8.1 | 0:0.98.3-4.el4_8.1 |
quagga-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:0.98.3-4.el4_8.1 | 0:0.98.3-4.el4_8.1 |
quagga-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:0.98.3-4.el4_8.1 | 0:0.98.3-4.el4_8.1 |
quaggaRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs | before 0:0.98.6-5.el5_5.2 | 0:0.98.6-5.el5_5.2 |
quagga-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs | before 0:0.98.6-5.el5_5.2 | 0:0.98.6-5.el5_5.2 |
quagga-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs | before 0:0.98.6-5.el5_5.2 | 0:0.98.6-5.el5_5.2 |
quaggaRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:0.98.6-5.el5_5.2 | 0:0.98.6-5.el5_5.2 |
quagga-contribRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:0.98.6-5.el5_5.2 | 0:0.98.6-5.el5_5.2 |
quagga-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:0.98.6-5.el5_5.2 | 0:0.98.6-5.el5_5.2 |
quaggaRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:0.98.6-5.el5_5.2 | 0:0.98.6-5.el5_5.2 |
quagga-contribRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:0.98.6-5.el5_5.2 | 0:0.98.6-5.el5_5.2 |
quagga-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:0.98.6-5.el5_5.2 | 0:0.98.6-5.el5_5.2 |
quagga-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:0.98.6-5.el5_5.2 | 0:0.98.6-5.el5_5.2 |
quaggaRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs | before 0:0.99.15-5.el6_0.1 | 0:0.99.15-5.el6_0.1 |
quagga-contribRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs | before 0:0.99.15-5.el6_0.1 | 0:0.99.15-5.el6_0.1 |
quagga-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs | before 0:0.99.15-5.el6_0.1 | 0:0.99.15-5.el6_0.1 |
quagga-develRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs | before 0:0.99.15-5.el6_0.1 | 0:0.99.15-5.el6_0.1 |
quaggaRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs | before 0:0.99.15-5.el6_0.1 | 0:0.99.15-5.el6_0.1 |
quagga-contribRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs | before 0:0.99.15-5.el6_0.1 | 0:0.99.15-5.el6_0.1 |
quagga-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs | before 0:0.99.15-5.el6_0.1 | 0:0.99.15-5.el6_0.1 |
quagga-develRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs | before 0:0.99.15-5.el6_0.1 | 0:0.99.15-5.el6_0.1 |
What each source reports
NVD Score used
Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a malformed Outbound Route Filtering (ORF) record in a BGP ROUTE-REFRESH (RR) message.
- Record
CVE-2010-2948- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a malformed Outbound Route Filtering (ORF) record in a BGP ROUTE-REFRESH (RR) message.
- Record
CVE-2010-2948- Updated
- 2026-11-02
EUVDEUVD-2010-2952No score
Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a malformed Outbound Route Filtering (ORF) record in a BGP ROUTE-REFRESH (RR) message.
- Record
EUVD-2010-2952- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q48q-864h-7c7wNo score
Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in...
Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a malformed Outbound Route Filtering (ORF) record in a BGP ROUTE-REFRESH (RR) message.
- Record
GHSA-q48q-864h-7c7w- Weakness
- CWE-119
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
vupen.com/english/advisories/2010/2304
securityfocus.com/bid/42635
secunia.com/advisories/42498
bugzilla.redhat.com/show_bug.cgi?id=626783
openwall.com/lists/oss-security/2010/08/24/3
Show 35 moreShow less
lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html
code.quagga.net?p=quagga.git%3Ba=commit%3Bh=d64379e8f3c0636df53ed08d5b2f1946cfedd0e3
security.gentoo.org/glsa/glsa-201202-02.xml
debian.org/security/2010/dsa-2104
ubuntu.com/usn/USN-1027-1
mandriva.com/security/advisories?name=MDVSA-2010:174
redhat.com/support/errata/RHSA-2010-0785.html
quagga.net/news2.php?y=2010&m=8&d=19
nvd.nist.gov/vuln/detail/CVE-2010-2948
access.redhat.com/errata/RHSA-2010:0785
github.com/advisories/GHSA-q48q-864h-7c7w
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0785.json
cve.org/CVERecord?id=CVE-2007-4826