CVE-2018-5378

Description

The Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute length is invalid. Arbitrary data from the bgpd process may be sent over the network to a peer and/or bgpd may crash.

Affected products

Vendor	Product	Affected	Fixed
Quagga	bgpd	bpgd – < 1.2.3	1.2.3

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 12 SP5	quagga	1.1.1-17.13.1	SUSE-SU-2024:3426-1
SLES 12 SP3	quagga	1.1.1-17.7.1	SUSE-SU-2018:0456-1
SLES 12 SP2	quagga	1.1.1-17.7.1	SUSE-SU-2018:0456-1
SLES 12 SP1	quagga	0.99.22.1-16.4.1	SUSE-SU-2018:0455-1
SLES 12	quagga	0.99.22.1-16.4.1	SUSE-SU-2018:0455-1

Show 9 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SLES 11 SP4	quagga	0.99.15-0.30.3.1	SUSE-SU-2018:0457-1
SLES 11 SP3	quagga	0.99.15-0.30.3.1	SUSE-SU-2018:0457-1
SLES for SAP 12 SP5	quagga	1.1.1-17.13.1	SUSE-SU-2024:3426-1
SLES for SAP 12 SP3	quagga	1.1.1-17.7.1	SUSE-SU-2018:0456-1
SLES for SAP 12 SP2	quagga	1.1.1-17.7.1	SUSE-SU-2018:0456-1
SLES for SAP 12 SP1	quagga	0.99.22.1-16.4.1	SUSE-SU-2018:0455-1
SLES for SAP 11 SP4	quagga	0.99.15-0.30.3.1	SUSE-SU-2018:0457-1
SUSE OpenStack Cloud 6	quagga	0.99.22.1-16.4.1	SUSE-SU-2018:0455-1
SUSE Linux Enterprise Point of Sale 11 SP3	quagga	0.99.15-0.30.3.1	SUSE-SU-2018:0457-1

openSUSE