IM
IronMonkey Threat Research

CVE-2018-5379 CRITICAL

Published: 2018-02-19 | Last Modified: 2026-06-17 | Status: Modified

Description

The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes. A successful attack could cause a denial of service or potentially allow an attacker to execute arbitrary code.

Additional Descriptions (1)

El demonio Quagga BGP (bgpd), en versiones anteriores a la 1.2.3, puede realizar una doble liberación (double free) de memoria al procesar ciertos formularios de un mensaje UPDATE que contienen atributos cluster-list y/o desconocidos. Un ataque con éxito podría provocar una denegación de servicio (DoS) o permitir que un atacante ejecute código arbitrario.

CVSS Metrics

Base Score: 7.5 (HIGH)

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access VectorNETWORK
Access ComplexityLOW
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactPARTIAL
Availability ImpactPARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 6.4

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-415
[email protected] Primary
en CWE-415

Affected Products

Vendor Product Version Update Type
quagga quagga * <built-in method update of dict object at 0x72a9b0c65b80> Application
debian debian_linux 7.0 <built-in method update of dict object at 0x72a9b0904f00> Operating System
debian debian_linux 8.0 <built-in method update of dict object at 0x72a9b0905240> Operating System
debian debian_linux 9.0 <built-in method update of dict object at 0x72a9cd06f340> Operating System
canonical ubuntu_linux 14.04 <built-in method update of dict object at 0x72a9b09072c0> Operating System
canonical ubuntu_linux 16.04 <built-in method update of dict object at 0x72a9b0907740> Operating System
canonical ubuntu_linux 17.10 <built-in method update of dict object at 0x72a9b0c66d80> Operating System
redhat enterprise_linux_server 7.0 <built-in method update of dict object at 0x72a9b0c65740> Operating System
redhat enterprise_linux_server_aus 7.4 <built-in method update of dict object at 0x72a9b0c66280> Operating System
redhat enterprise_linux_server_aus 7.6 <built-in method update of dict object at 0x72a9b0907380> Operating System
redhat enterprise_linux_server_eus 7.4 <built-in method update of dict object at 0x72a9cd06f480> Operating System
redhat enterprise_linux_server_eus 7.5 <built-in method update of dict object at 0x72a9cd06d880> Operating System
redhat enterprise_linux_server_eus 7.6 <built-in method update of dict object at 0x72a9b0905dc0> Operating System
redhat enterprise_linux_server_tus 7.4 <built-in method update of dict object at 0x72a9ccf9f140> Operating System
redhat enterprise_linux_server_tus 7.6 <built-in method update of dict object at 0x72a9ccf9c780> Operating System
redhat enterprise_linux_workstation 7.0 <built-in method update of dict object at 0x72a9cd06e580> Operating System
siemens ruggedcom_rox_ii_firmware * <built-in method update of dict object at 0x72a9b0c679c0> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:quagga:quagga:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:ruggedcom_rox_ii_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:ruggedcom_rox_ii:-:*:*:*:*:*:*:*

References

Notification
Message here