The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade quagga | Feb 22, 2018 | Feb 19, 2018 |
| Debian | — | Upgrade quagga | Feb 19, 2019 | Feb 19, 2018 |
| Freebsd | — | Upgrade quagga | Dec 10, 2025 | Feb 15, 2018 |
| Gentoo Linux | — | Upgrade net-misc/quagga. | Apr 23, 2018 | Feb 19, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade quagga | Dec 4, 2019 | Feb 19, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade quagga | Dec 18, 2019 | Feb 19, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade quagga | Nov 19, 2019 | Feb 19, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 19, 2018 |
| Suse | — | Upgrade libfpm_pb0Upgrade quaggaUpgrade quagga-develUpgrade libospfapiclient0Upgrade libquagga_pb0Upgrade libospf0Upgrade libzebra1 | Mar 3, 2020 | Feb 16, 2018 |
| Ubuntu | — | Upgrade quagga-bgpdUpgrade quagga | Apr 25, 2018 | Feb 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub