CVE-2018-5380

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input.

Metrics

CVSS 3.0 4.3/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
Quagga	bgpd	>= bpgd, < 1.2.3

References

http://savannah.nongnu.org/forum/forum.php?forum_id=9095Third Party Advisory
http://www.kb.cert.org/vuls/id/940439Third Party Advisory, US Government Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-451142.pdfThird Party Advisory
https://gogs.quagga.net/Quagga/quagga/src/master/doc/security/Quagga-2018-1550.txtVendor Advisory
https://lists.debian.org/debian-lts-announce/2018/02/msg00021.htmlMailing List, Third Party Advisory
https://security.gentoo.org/glsa/201804-17Third Party Advisory
https://usn.ubuntu.com/3573-1/Third Party Advisory
https://www.debian.org/security/2018/dsa-4115Third Party Advisory
http://savannah.nongnu.org/forum/forum.php?forum_id=9095Third Party Advisory
http://www.kb.cert.org/vuls/id/940439Third Party Advisory, US Government Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-451142.pdfThird Party Advisory
https://gogs.quagga.net/Quagga/quagga/src/master/doc/security/Quagga-2018-1550.txtVendor Advisory
https://lists.debian.org/debian-lts-announce/2018/02/msg00021.htmlMailing List, Third Party Advisory
https://security.gentoo.org/glsa/201804-17Third Party Advisory
https://usn.ubuntu.com/3573-1/Third Party Advisory
https://www.debian.org/security/2018/dsa-4115Third Party Advisory

Timeline

Published: Feb 19, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-53817.5The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp CVE-2018-53824.4The default BKS keystore use an HMAC that is only 16 bits long, which can allow an attacker to compromise the integrity of a BKS keystore. B CVE-2018-53836.8Bluetooth firmware or operating system software drivers in macOS versions before 10.13, High Sierra and iOS versions before 11.4, and Androi CVE-2018-53849.8Navarino Infinity web interface up to version 2.2 exposes an unauthenticated script that is prone to blind sql injection. If successfully ex CVE-2018-53858.8Navarino Infinity is prone to session fixation attacks. The server accepts the session ID as a GET parameter which can lead to bypassing the CVE-2018-53867.5Some Navarino Infinity functions, up to version 2.2, placed in the URL can bypass any authentication mechanism leading to an information lea CVE-2018-53877.5Wizkunde SAMLBase may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be a CVE-2018-53886.5In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exha CVE-2018-53895.9The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versi CVE-2018-53907.5Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incomi CVE-2018-53917.5The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragm CVE-2018-53927.5mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR. ASLR is an exploit mitigation