Skip to content
OpenAdvisories
High DSA-4115-1 3 CVEs

quagga - security update

Published Feb 15, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 8 quagga 0.99.23.1-1+deb8u5
Debian · 9 quagga 1.1.1-3+deb9u2

Vulnerabilities 3

  • High 7.5
    CVE-2018-5379 EPSS 38%

    The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE mess…

    quagga bgpd quagga Ubuntu
  • Medium 6.5
    CVE-2018-5381 EPSS 30%

    The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in…

    quagga bgpd quagga Ubuntu
  • Medium 4.3
    CVE-2018-5380 EPSS 15%

    The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for …

    quagga bgpd quagga Ubuntu