CVE-2018-5381
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function. The parser can enter an infinite loop on invalid capabilities if a Multi-Protocol capability does not have a recognized AFI/SAFI, causing a denial of service.
Affected (8)
Show all products
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 14.04 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 7.0 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.13.0 |
| Running on/with | Platform Versions |
|---|---|
Siemens Ruggedcom Rox Ii | All versions |
Related CWEs
CWE-228
Improper Handling of Syntactically Invalid Structure
The product does not handle or incorrectly handles input that is not syntactically well-formed with respect to the associated specification.
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
References (16)
Source: cret@cert.org
Third Party AdvisoryUS Government Resource
Source: cret@cert.org
MitigationThird Party Advisory
Source: cret@cert.org
Vendor Advisory
Source: cret@cert.org
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Timeline
No history available yet.