Skip to content
OpenAdvisories
High ELSA-2018-0377 1 CVE

Important: quagga security update (Oracle Linux 7)

Published Feb 28, 2018 · Updated Feb 28, 2018

Ecosystem: Oracle Linux

Summary

[0.99.22.4-5]
- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
certain forms of UPDATE message allowing to crash or potentially execute
arbitrary code
- Resolves: rhbz#1546015

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 quagga 0:0.99.22.4-5.el7_4
Oracle Linux · 7 quagga-contrib 0:0.99.22.4-5.el7_4
Oracle Linux · 7 quagga-devel 0:0.99.22.4-5.el7_4

Vulnerabilities 1

  • High 7.5
    CVE-2018-5379 EPSS 38%

    The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE mess…

    quagga bgpd quagga Ubuntu