Vulnerabilities in Quagga
5 resultsCVE-2018-5378HIGHThe Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute leEPSS 74.4%CVE-2018-5379HIGHThe Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing clustEPSS 39.5%CVE-2018-5381MEDIUMThe Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgpEPSS 30.5%CVE-2018-5380MEDIUMThe Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer vaEPSS 15.0%CVE-2012-5521—quagga (ospf6d) 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removalEPSS 1.5%