The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade quagga | Feb 22, 2018 | Feb 19, 2018 |
| Debian | — | Upgrade quagga | Feb 19, 2019 | Feb 19, 2018 |
| Freebsd | — | Upgrade quagga | Dec 10, 2025 | Feb 15, 2018 |
| Gentoo Linux | — | Upgrade net-misc/quagga. | Apr 23, 2018 | Feb 19, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade quagga | Dec 4, 2019 | Feb 19, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade quagga | Dec 18, 2019 | Feb 19, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade quagga | Nov 19, 2019 | Feb 19, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 19, 2018 |
| Suse | — | Upgrade libzebra1Upgrade libospf0Upgrade quaggaUpgrade quagga-develUpgrade libquagga_pb0Upgrade libospfapiclient0Upgrade libfpm_pb0 | Mar 3, 2020 | Feb 16, 2018 |
| Ubuntu | — | Upgrade quaggaUpgrade quagga-bgpd | Apr 25, 2018 | Feb 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub