CVE-2010-2948

[CVE catalog]

Severity

Unknown

Published

Aug 19, 2010, 12:00:00 AM UTC

Updated

Mar 9, 2026, 1:18:45 AM UTC

Source

[NVD] · [CVE record]

EPSS

4.04% · Oct 27, 2026

Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a malformed Outbound Route Filtering (ORF) record in a BGP ROUTE-REFRESH (RR) message. (bgpd): Stack buffer overflow by processing certain Route-Refresh messages This issue is not planned to be fixed in Red Hat Enterprise Linux 3 due to this product being in Production 3 of its maintenance life-cycle, where only qualified security errata of important and critical impact are addressed. For further information about the Errata Support Policy, visit: http://www.redhat.com/security/updates/errata A future update in Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5 may address this flaw. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.