Belatedly commit the patch for SA-14:21 to head. It was not committed to

head at the time because it's a band-aid, rather than a complete fix, but
the complete fix never materialized.

sbin/routed/input.c

@@ -288,6 +288,10 @@ input(struct sockaddr_in *from,		/* received from this IP address */
 				/* Answer a query from a utility program
 				 * with all we know.
 				 */
+				if (aifp == NULL) {
+					trace_pkt("ignore remote query");
+					return;
+				}
 				if (from->sin_port != htons(RIP_PORT)) {
 					/*
 					 * insecure: query from non-router node