Vulnerabilities in Quagga

5 results

Vexday analysis

Quagga possui 4 vulnerabilidades registradas sem atividade de exploração ativa (KEV). A fraqueza dominante é CWE-119 (buffer overflow), padrão em software de roteamento, mas nenhuma foi publicada recentemente, indicando risco histórico estável e não emergente.

CVE-2018-5378HIGHThe Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute leEPSS 74.2%CVE-2018-5379HIGHThe Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing clustEPSS 38.5%CVE-2018-5381MEDIUMThe Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgpEPSS 30.2%CVE-2018-5380MEDIUMThe Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer vaEPSS 14.8%CVE-2012-5521—quagga (ospf6d) 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removalEPSS 1.5%