CVE-2018-5381
High · 7.5CVSS
7.5
EPSS
30.2%
Published
Feb 19, 2018
CISA due date
—
The record
The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function. The parser can enter an infinite loop on invalid capabilities if a Multi-Protocol capability does not have a recognized AFI/SAFI, causing a denial of service.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:7 | quagga | 0 | 0.99.22.4-1+wheezy3+deb7u3 |
| Debian:8 | quagga | 0 | 0.99.23.1-1+deb8u5 |
| Debian:9 | quagga | 0 | 1.1.1-3+deb9u2 |
| Mageia:6 | quagga | 0 | 0.99.24.1-6.1.mga6 |
| SUSE:Linux Enterprise Point of Sale 11 SP3 | quagga | 0 | 0.99.15-0.30.3.1 |
| SUSE:Linux Enterprise Server 11 SP3-LTSS | quagga | 0 | 0.99.15-0.30.3.1 |
| SUSE:Linux Enterprise Server 11 SP3-TERADATA | quagga | 0 | 0.99.15-0.30.3.1 |
| SUSE:Linux Enterprise Server 11 SP4 | quagga | 0 | 0.99.15-0.30.3.1 |
| SUSE:Linux Enterprise Server 12 SP1-LTSS | quagga | 0 | 0.99.22.1-16.4.1 |
| SUSE:Linux Enterprise Server 12 SP2 | quagga | 0 | 1.1.1-17.7.1 |
| SUSE:Linux Enterprise Server 12 SP3 | quagga | 0 | 1.1.1-17.7.1 |
| SUSE:Linux Enterprise Server 12 SP5 | quagga | 0 | 1.1.1-17.13.1 |
| SUSE:Linux Enterprise Server 12-LTSS | quagga | 0 | 0.99.22.1-16.4.1 |
| SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 | quagga | 0 | 1.1.1-17.7.1 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | quagga | 0 | 0.99.15-0.30.3.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | quagga | 0 | 0.99.22.1-16.4.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | quagga | 0 | 1.1.1-17.7.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | quagga | 0 | 1.1.1-17.7.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | quagga | 0 | 1.1.1-17.13.1 |
| SUSE:Linux Enterprise Software Development Kit 11 SP4 | quagga | 0 | 0.99.15-0.30.3.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP2 | quagga | 0 | 1.1.1-17.7.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP3 | quagga | 0 | 1.1.1-17.7.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP5 | quagga | 0 | 1.1.1-17.13.1 |
| SUSE:OpenStack Cloud 6 | quagga | 0 | 0.99.22.1-16.4.1 |
| Ubuntu:14.04:LTS | quagga | 0 | 0.99.22.4-3ubuntu1.5 |
| Ubuntu:16.04:LTS | quagga | 0 | 0.99.24.1-2ubuntu1.4 |
| openSUSE:Tumbleweed | quagga | 0 | 1.2.4-2.14 |
Related vulnerabilities
- CVE-2018-5380 The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP… Also affects quagga
- CVE-2018-5379 The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when… Also affects quagga
- CVE-2017-16227 The aspath_put function in bgpd/bgp_aspath.c in Quagga before 1.2.2 allows remote… Also affects quagga
- CVE-2016-1245 It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a… Also affects quagga
- CVE-2016-4036 The quagga package before 0.99.23-2.6.1 in openSUSE and SUSE Linux Enterprise Server 11… Also affects quagga
- CVE-2016-2342 The bgp_nlri_parse_vpnv4 function in bgp_mplsvpn.c in the VPNv4 NLRI parser in bgpd in… Also affects quagga
- CVE-2013-2236 Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API… Also affects quagga
- CVE-2018-5378 The Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the… Also affects quagga