ISOMAN

CVE

CVE-2018-5379

The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes. A successful attack could cause a denial of service or potentially allow an attacker to execute arbitrary code.

Severity
HIGH
CVSS
7.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://savannah.nongnu.org/forum/forum.php?forum_id=9095
  2. http://www.kb.cert.org/vuls/id/940439
  3. http://www.securityfocus.com/bid/103105
  4. https://access.redhat.com/errata/RHSA-2018:0377
  5. https://cert-portal.siemens.com/productcert/pdf/ssa-451142.pdf
  6. https://gogs.quagga.net/Quagga/quagga/src/master/doc/security/Quagga-2018-1114.txt
  7. https://lists.debian.org/debian-lts-announce/2018/02/msg00021.html
  8. https://security.gentoo.org/glsa/201804-17
  9. https://usn.ubuntu.com/3573-1/
  10. https://www.debian.org/security/2018/dsa-4115
  11. http://savannah.nongnu.org/forum/forum.php?forum_id=9095
  12. http://www.kb.cert.org/vuls/id/940439
  13. http://www.securityfocus.com/bid/103105
  14. https://access.redhat.com/errata/RHSA-2018:0377
  15. https://cert-portal.siemens.com/productcert/pdf/ssa-451142.pdf
  16. https://gogs.quagga.net/Quagga/quagga/src/master/doc/security/Quagga-2018-1114.txt
  17. https://lists.debian.org/debian-lts-announce/2018/02/msg00021.html
  18. https://security.gentoo.org/glsa/201804-17
  19. https://usn.ubuntu.com/3573-1/
  20. https://www.debian.org/security/2018/dsa-4115