Skip to content
OpenAdvisories
High DLA-1286-1 3 CVEs

quagga - security update

Published Feb 16, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 quagga 0.99.22.4-1+wheezy3+deb7u3

Vulnerabilities 3

  • High 7.5
    CVE-2018-5379 EPSS 38%

    The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE mess…

    quagga bgpd quagga Ubuntu
  • Medium 6.5
    CVE-2018-5381 EPSS 30%

    The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in…

    quagga bgpd quagga Ubuntu
  • Medium 4.3
    CVE-2018-5380 EPSS 15%

    The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for …

    quagga bgpd quagga Ubuntu