[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248149

 
 

909

 
 

194803

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS-2018-957

ID: oval:org.secpod.oval:def:1600840Date: (C)2018-03-01   (M)2022-08-29
Class: PATCHFamily: unix




Infinite loop issue triggered by invalid OPEN message allows denial-of-serviceAn infinite loop vulnerability was discovered in Quagga. A BGP peer could send specially crafted packets that would cause the daemon to enter an infinite loop, denying service and consuming CPU until it is restarted.Double free vulnerability in bgpd when processing certain forms of UPDATE message allowing to crash or potentially execute arbitrary codeA double-free vulnerability was found in Quagga. A BGP peer could send a specially crafted UPDATE message which would cause allocated blocks of memory to be freed more than once, potentially leading to a crash or other issues.bgpd can overrun internal BGP code-to-string conversion tables potentially allowing crashA vulnerability was found in Quagga, in the log formatting code. Specially crafted messages sent by BGP peers could cause Quagga to read one element past the end of certain static arrays, causing arbitrary binary data to appear in the logs or potentially, a crash.

Platform:
Amazon Linux AMI
Product:
quagga
Reference:
ALAS-2018-957
CVE-2018-5379
CVE-2018-5380
CVE-2018-5381
CVE    3
CVE-2018-5379
CVE-2018-5381
CVE-2018-5380
CPE    2
cpe:/o:amazon:linux
cpe:/a:quagga:quagga

© SecPod Technologies