Published: 19/02/2018 Updated: 09/10/2019

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function. The parser can enter an infinite loop on invalid capabilities if a Multi-Protocol capability does not have a recognized AFI/SAFI, causing a denial of service.

Vulnerable Product	Search on Vulmon	Subscribe to Product
quagga quagga
canonical ubuntu linux 16.04
canonical ubuntu linux 17.10
canonical ubuntu linux 14.04
debian debian linux 7.0
debian debian linux 9.0
debian debian linux 8.0
siemens ruggedcom_rox_ii_firmware

Debian Bug report logs - #890563 quagga: CVE-2018-5378 CVE-2018-5379 CVE-2018-5380 CVE-2018-5381 Package: src:quagga; Maintainer for src:quagga is Brett Parker <iDunno@sommitrealweirdcouk>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 15 Feb 2018 22:42:05 UTC Severity: serious Tags: fixed-upstre ...

Several security issues were fixed in Quagga ...

Several vulnerabilities have been discovered in Quagga, a routing daemon The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2018-5378 It was discovered that the Quagga BGP daemon, bgpd, does not properly bounds check data sent with a NOTIFY to a peer, if an attribute length is invalid A configured B ...

Infinite loop issue triggered by invalid OPEN message allows denial-of-serviceAn infinite loop vulnerability was discovered in Quagga A BGP peer could send specially crafted packets that would cause the daemon to enter an infinite loop, denying service and consuming CPU until it is restarted(CVE-2018-5381) Double free vulnerability in bgpd when p ...

An infinite loop vulnerability was discovered in Quagga A BGP peer could send specially crafted packets that would cause the daemon to enter an infinite loop, denying service and consuming CPU until it is restarted ...

CWE-835 https://gogs.quagga.net/Quagga/quagga/src/master/doc/security/Quagga-2018-1975.txt http://www.kb.cert.org/vuls/id/940439 http://savannah.nongnu.org/forum/forum.php?forum_id=9095 https://www.debian.org/security/2018/dsa-4115 https://lists.debian.org/debian-lts-announce/2018/02/msg00021.html https://usn.ubuntu.com/3573-1/https://security.gentoo.org/glsa/201804-17 https://cert-portal.siemens.com/productcert/pdf/ssa-451142.pdf https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=890563 https://usn.ubuntu.com/3573-1/https://nvd.nist.gov https://www.kb.cert.org/vuls/id/940439

CVE-2018-5381

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect