https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T05:16:19.568460+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2018-5380 CVE-2018-5380 2026-10-01T05:16:19.841161+00:00

Affected: Quagga bgpd

The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input.

 https://vulnerability.circl.lu/vuln/usn-3573-1 USN-3573-1 — quagga vulnerabilities 2026-10-01T05:16:19.841282+00:00

Affected: Ubuntu:14.04:LTS: quagga, Ubuntu:16.04:LTS: quagga

It was discovered that a double-free vulnerability existed in the Quagga BGP daemon when processing certain forms of UPDATE message. A remote attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2018-5379)

It was discovered that the Quagga BGP daemon did not properly bounds check the data sent with a NOTIFY to a peer. An attacker could use this to expose sensitive information or possibly cause a denial of service. This issue only affected Ubuntu 17.10. (CVE-2018-5378)

It was discovered that a table overrun vulnerability existed in the Quagga BGP daemon. An attacker in control of a configured peer could use this to possibly expose sensitive information or possibly cause a denial of service. (CVE-2018-5380)

It was discovered that the Quagga BGP daemon in some configurations did not properly handle invalid OPEN messages. An attacker in control of a configured peer could use this to cause a denial of service (infinite loop). (CVE-2018-5381)