Test ID:	1.3.6.1.4.1.25623.1.0.843355
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-3471-1)
Summary:	The remote host is missing an update for the 'quagga' package(s) announced via the USN-3471-1 advisory.
Description:	Summary: The remote host is missing an update for the 'quagga' package(s) announced via the USN-3471-1 advisory. Vulnerability Insight: Andreas Jaggi discovered that Quagga incorrectly handled certain BGP UPDATE messages. A remote attacker could possibly use this issue to cause Quagga to crash, resulting in a denial of service. (CVE-2017-16227) Quentin Young discovered that Quagga incorrectly handled memory in the telnet vty CLI. An attacker able to connect to the telnet interface could possibly use this issue to cause Quagga to consume memory, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2017-5495) Affected Software/OS: 'quagga' package(s) on Ubuntu 14.04, Ubuntu 16.04, Ubuntu 17.04, Ubuntu 17.10. Solution: Please install the updated package(s). CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-16227 Debian Security Information: DSA-4011 (Google Search) http://www.debian.org/security/2017/dsa-4011 http://download.savannah.gnu.org/releases/quagga/quagga-1.2.2.changelog.txt https://bugs.debian.org/879474 https://git.savannah.gnu.org/cgit/quagga.git/commit/?id=7a42b78be9a4108d98833069a88e6fddb9285008 https://lists.quagga.net/pipermail/quagga-dev/2017-September/033284.html Common Vulnerability Exposure (CVE) ID: CVE-2017-5495 BugTraq ID: 95745 http://www.securityfocus.com/bid/95745 RedHat Security Advisories: RHSA-2017:0794 http://rhn.redhat.com/errata/RHSA-2017-0794.html http://www.securitytracker.com/id/1037688
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.