tree 463b917f9f80236be01e4502863b34ae2d52b53d
parent a0bf59bcac8b40c3f83e7f2e7f65087ece6acfc7
author CROSS <info@codenomicon.com> 1317028625 +0400
committer Denis Ovsienko <infrastation@yandex.ru> 1317048376 +0400

bgpd: CVE-2011-3327 (ext. comm. buffer overflow)

This vulnerability (CERT-FI #513254) was reported by CROSS project.
They have also suggested a fix to the problem, which was found
acceptable.

The problem occurs when bgpd receives an UPDATE message containing
255 unknown AS_PATH attributes in Path Attribute Extended Communities.
This causes a buffer overlow in bgpd.

* bgp_ecommunity.c
  * ecommunity_ecom2str(): perform size check earlier