Description
The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes. A successful attack could cause a denial of service or potentially allow an attacker to execute arbitrary code.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Quagga bgpd
bpgd to < 1.2.3affected
References
- https://usn.ubuntu.com/3573-1/ ↗
- https://www.debian.org/security/2018/dsa-4115 ↗
- http://www.securityfocus.com/bid/103105 ↗
- http://savannah.nongnu.org/forum/forum.php?forum_id=9095 ↗
- https://security.gentoo.org/glsa/201804-17 ↗
- https://gogs.quagga.net/Quagga/quagga/src/master/doc/security/Quagga-2018-1114.txt ↗
- https://lists.debian.org/debian-lts-announce/2018/02/msg00021.html ↗
- http://www.kb.cert.org/vuls/id/940439 ↗
- https://access.redhat.com/errata/RHSA-2018:0377 ↗
- https://cert-portal.siemens.com/productcert/pdf/ssa-451142.pdf ↗