The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes. A successful attack could cause a denial of service or potentially allow an attacker to execute arbitrary code.
El demonio Quagga BGP (bgpd), en versiones anteriores a la 1.2.3, puede realizar una doble liberación (double free) de memoria al procesar ciertos formularios de un mensaje UPDATE que contienen atributos cluster-list y/o desconocidos. Un ataque con éxito podría provocar una denegación de servicio (DoS) o permitir que un atacante ejecute código arbitrario.
AV:N/AC:L/Au:N/C:P/I:P/A:P
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | PARTIAL |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-415
|
| [email protected] | Primary |
en
CWE-415
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| quagga | quagga | * | <built-in method update of dict object at 0x72a9b0c65b80> | Application |
| debian | debian_linux | 7.0 | <built-in method update of dict object at 0x72a9b0904f00> | Operating System |
| debian | debian_linux | 8.0 | <built-in method update of dict object at 0x72a9b0905240> | Operating System |
| debian | debian_linux | 9.0 | <built-in method update of dict object at 0x72a9cd06f340> | Operating System |
| canonical | ubuntu_linux | 14.04 | <built-in method update of dict object at 0x72a9b09072c0> | Operating System |
| canonical | ubuntu_linux | 16.04 | <built-in method update of dict object at 0x72a9b0907740> | Operating System |
| canonical | ubuntu_linux | 17.10 | <built-in method update of dict object at 0x72a9b0c66d80> | Operating System |
| redhat | enterprise_linux_server | 7.0 | <built-in method update of dict object at 0x72a9b0c65740> | Operating System |
| redhat | enterprise_linux_server_aus | 7.4 | <built-in method update of dict object at 0x72a9b0c66280> | Operating System |
| redhat | enterprise_linux_server_aus | 7.6 | <built-in method update of dict object at 0x72a9b0907380> | Operating System |
| redhat | enterprise_linux_server_eus | 7.4 | <built-in method update of dict object at 0x72a9cd06f480> | Operating System |
| redhat | enterprise_linux_server_eus | 7.5 | <built-in method update of dict object at 0x72a9cd06d880> | Operating System |
| redhat | enterprise_linux_server_eus | 7.6 | <built-in method update of dict object at 0x72a9b0905dc0> | Operating System |
| redhat | enterprise_linux_server_tus | 7.4 | <built-in method update of dict object at 0x72a9ccf9f140> | Operating System |
| redhat | enterprise_linux_server_tus | 7.6 | <built-in method update of dict object at 0x72a9ccf9c780> | Operating System |
| redhat | enterprise_linux_workstation | 7.0 | <built-in method update of dict object at 0x72a9cd06e580> | Operating System |
| siemens | ruggedcom_rox_ii_firmware | * | <built-in method update of dict object at 0x72a9b0c679c0> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:quagga:quagga:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:siemens:ruggedcom_rox_ii_firmware:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:siemens:ruggedcom_rox_ii:-:*:*:*:*:*:*:* |