[ubuntu-hardened] How to fix CVE-2004-0230

[Brian Morton]

https://lkml.org/lkml/2004/6/28/168

On Tue, Jul 19, 2022 at 9:32 AM Thiago Silveira Alexandre <thsalex at gmail.com>
wrote:

> Hi Brian, thanks for your quick reply.
>
> Ok! Do you have any documentation or link for this?
>
> I need to prove this to my client and an official link or research will
> help me.
>
> Thank you very much for your response and availability.
>
> Em ter., 19 de jul. de 2022 às 10:12, Brian Morton <rokclimb15 at gmail.com>
> escreveu:
>
>> Hi Thiago,
>>
>> Quagga is a BGP daemon, and this vulnerability has been patched in that
>> package for most Ubuntu releases. If you don't run BGP, there's no need to
>> install quagga and you should probably remove it. The core Linux TCP stack
>> isn't impacted by this vulnerability in a way that can be exploited.
>>
>> Thanks,
>>
>> On Tue, Jul 19, 2022 at 9:06 AM Thiago Silveira Alexandre <
>> thsalex at gmail.com> wrote:
>>
>>> Hey!
>>> I have a problem with the vulnerability patch CVE-2004-0230. Ubuntu
>>> suggests I install quagga to fix this.
>>>
>>> https://ubuntu.com/security/CVE-2004-0230
>>>
>>> I was trying this solution but the vulnerability remains active.
>>>
>>> Can anyone help me to fix it?
>>>
>>> Thanks
>>>
>>> --
>>> Thiago Silveira Alexandre
>>>
>>
>
> --
> Thiago Silveira Alexandre
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-hardened/attachments/20220719/a5ab42dd/attachment.html>