DeutschShown in its original language — a full translation is planned for a future version.
quagga: Mehrere Schwachstellen
view advisory published 2018-02-15
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in quagga ausnutzen um Informationen offenzulegen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen und um einen Denial of Service Zustand herbeizuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-5381US | high7.5 | — | ||
The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function. The pars… | ||||
| CVE-2018-5380US | medium4.3 | — | ||
The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input. | ||||
| CVE-2018-5379US | critical9.8 | — | ||
The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes. A suc… | ||||
| CVE-2018-5378US | medium5.9 | — | ||
The Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute length is invalid. Arbitrary data from the… | ||||
02
references
External citations — patches, advisories, analysis.
- CentOS Security Advisory CESA-2018:0377 vom 2018-03-10external
- Oracle Linux Security Advisory ELSA-2018-0377 vom 2018-03-01external
- Red Hat Security Advisory RHSA-2018:0377 vom 2018-02-28external
- Quagga Security Note 2018-0543 vom 2018-02-15external
- Quagga Security Note 2018-1114 vom 2018-02-15external
- Quagga Security Note 2018-1550 vom 2018-02-15external
- Quagga Security Note 2018-1975 vom 2018-02-15external
- SUSE Security Update SUSE-SU-2024:3426-1 vom 2024-09-24external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan