[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <87hbifuj0h.fsf@mid.deneb.enyo.de>
Date: Sat, 28 Aug 2010 12:30:22 +0200
From: Florian Weimer <fw@...eb.enyo.de>
To: oss-security@...ts.openwall.com
Subject: CVE Request: BGP protocol vulnerability
The BGP protocol and its various extensions require that BGP peering
sessions are terminated when a peer receives a BGP update message
which it considers semantically incorrect, leading to a persistent
denial-of-service condition if the update is received again after the
terminated session is reestablished.
(This is not something new at all---we just need to get up, treat it
as a vulnerability, and fix it.)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
