Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2018-5380
HistoryFeb 13, 2018 - 12:00 a.m.

CVE-2018-5380

2018-02-1300:00:00
ubuntu.com
ubuntu.com
16
quagga
bgp daemon
version 1.2.3
vulnerability
cve-2018-5380
code-to-stringconversion
debug
mdeslaur
unix

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS

0.005

Percentile

75.5%

JSON

The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal
BGP code-to-string conversion tables used for debug by 1 pointer value,
based on input.

Notes

Author Note
mdeslaur this is Quagga-2018-1550
OSVersionArchitecturePackageVersionFilename
ubuntu17.10noarchquagga< 1.1.1-3ubuntu0.2UNKNOWN
ubuntu14.04noarchquagga< 0.99.22.4-3ubuntu1.5UNKNOWN
ubuntu16.04noarchquagga< 0.99.24.1-2ubuntu1.4UNKNOWN

Related

prion 1
debiancve 1
cvelist 1
cve 2
nvd 2
redhatcve 1
nessus 23
openvas 14
ics 1
amazon 1
osv 4
mageia 1
debian 3
gentoo 1
ubuntu 1
fedora 2
freebsd 1
f5 1
cert 1
suse 4
rosalinux 1
prion
prion
Design/Logic Flaw
2018-02-19 13:29:00
debiancve
debiancve
CVE-2018-5380
2018-02-19 13:29:00
cvelist
cvelist
CVE-2018-5380
2018-02-19 13:00:00
cve
cve
CVE-2018-5380
2018-02-19 13:29:00
CVE-2018-1000066
2018-02-16 14:29:00
nvd
nvd
CVE-2018-5380
2018-02-19 13:29:00
CVE-2018-1000066
2018-02-16 14:29:00
redhatcve
redhatcve
CVE-2018-5380
2018-02-16 00:49:23
nessus
nessus
Siemens RuggedCom Server < v2.13.0 Multiple Vulnerabilities
2019-04-10 00:00:00
EulerOS 2.0 SP5 : quagga (EulerOS-SA-2019-2228)
2019-11-08 00:00:00
Amazon Linux AMI : quagga (ALAS-2018-957)
2018-02-22 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for quagga (EulerOS-SA-2019-2228)
2020-01-23 00:00:00
Mageia: Security Advisory (MGASA-2018-0133)
2022-01-28 00:00:00
Fedora Update for quagga FEDORA-2018-b3e985489b
2018-03-14 00:00:00
ics
ics
Siemens RUGGEDCOM ROX II
2019-04-09 12:00:00
amazon
amazon
Important: quagga
2018-02-20 21:26:00
osv
osv
quagga - security update
2018-02-16 00:00:00
quagga - security update
2018-02-15 00:00:00
Security update for quagga
2024-09-24 16:42:36
mageia
mageia
Updated quagga packages fix security vulnerability
2018-02-22 22:49:44
debian
debian
[SECURITY] [DSA 4115-1] quagga security update
2018-02-15 22:25:18
[SECURITY] [DLA 1286-1] quagga security update
2018-02-16 22:32:14
[SECURITY] [DSA 4115-1] quagga security update
2018-02-15 22:25:18
gentoo
gentoo
Quagga: Multiple vulnerabilities
2018-04-22 00:00:00
ubuntu
ubuntu
Quagga vulnerabilities
2018-02-16 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: quagga-1.2.2-2.fc27
2018-03-06 17:35:18
[SECURITY] Fedora 26 Update: quagga-1.2.2-2.fc26
2018-03-06 17:34:22
freebsd
freebsd
quagga -- several security issues
2018-01-31 00:00:00
f5
f5
K62789814 : Quagga bgpd vulnerabilities CVE-2018-5378, CVE-2018-5379, CVE-2018-5380, and CVE-2018-5381
2018-02-23 00:00:00
cert
cert
Quagga bgpd is affected by multiple vulnerabilities
2018-02-15 00:00:00
suse
suse
Security update for quagga (important)
2018-02-19 15:13:50
Security update for quagga (important)
2018-02-16 06:10:08
Security update for quagga (important)
2018-02-16 06:08:44
rosalinux
rosalinux
Advisory ROSA-SA-2021-1960
2021-07-02 18:04:24

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS

0.005

Percentile

75.5%

JSON
Related for UB:CVE-2018-5380
prion1debiancve1cvelist1cve2nvd2redhatcve1nessus23openvas14ics1amazon1osv4mageia1debian3gentoo1ubuntu1fedora2freebsd1f51cert1suse4rosalinux1