Red Hat Security AdvisoryRHSA-2018:0377
quagga security update
Released 2018-02-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7) quagga-0.99.22.4-5.el7_4, quagga-0.99.22.4-5.el7_4.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) quagga-contrib-0.99.22.4-5.el7_4, quagga-devel-0.99.22.4-5.el7_4, quagga-devel-0.99.22.4-5.el7_4.ppc
- Red Hat Enterprise Linux Workstation (v. 7) quagga-0.99.22.4-5.el7_4
- Red Hat Enterprise Linux Workstation Optional (v. 7) quagga-contrib-0.99.22.4-5.el7_4, quagga-devel-0.99.22.4-5.el7_4
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) quagga-0.99.22.4-5.el7_4
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) quagga-contrib-0.99.22.4-5.el7_4, quagga-devel-0.99.22.4-5.el7_4
Fixes 1 record
Priority HIGH 69
The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.38454 · Published 2018-02-19 · Partial fix · 1.2.3 CWE-415
