Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Quagga bgpd — GLSA-201804-17 Clear all filters
TI-2018-03914 CVE-2018-5381 · GHSA-g4qp-j7fc-2xcf

Infinite loop in Quagga bgpd

Priority MEDIUM 56

The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.30162 Published 2018-02-19 Partial fix · 1.2.3 CWE-228
TI-2018-03913 CVE-2018-5380 · GHSA-265f-c4jh-jcfq

Out-of-bounds read in Quagga bgpd

Priority LOW 36

The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.14836 Published 2018-02-19 Partial fix · 1.2.3 CWE-125
TI-2018-03912 CVE-2018-5379 · GHSA-5prq-47x2-38gv

Double free in Quagga bgpd

Priority HIGH 69

The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.38454 Published 2018-02-19 Partial fix · 1.2.3 CWE-415
TI-2018-03911 CVE-2018-5378 · GHSA-529c-38p9-5c53

Memory corruption in Quagga bgpd

Priority HIGH 70

The Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute length is invalid.

CVSS 3.0HIGH 7.1 Network Low privileges No interaction EPSS 0.742 Published 2018-02-19 Fixed in 1.2.3 CWE-119