ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2018-5378

—
CVSS 3.0
5.9 medium
EPSS
74%p99
Published
()
Modified
Description

The Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute length is invalid. Arbitrary data from the bgpd process may be sent over the network to a peer and/or bgpd may crash.

Vendors
quaggadebiancanonical
Products
quagga, debian linux, ubuntu linux
Weakness
CWE-119
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (74.2%)

In the news

No ingested article mentions this CVE yet.