CVE Vulnerabilities

CVE-2018-5379

Double Free

Published: Feb 19, 2018 | Modified: Nov 21, 2024
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
8.1 IMPORTANT
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Ubuntu
MEDIUM

The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes. A successful attack could cause a denial of service or potentially allow an attacker to execute arbitrary code.

Weakness

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

Affected Software

Name Vendor Start Version End Version
Quagga Quagga * 1.2.2 (including)
Red Hat Enterprise Linux 7 RedHat quagga-0:0.99.22.4-5.el7_4 *
Quagga Ubuntu artful *
Quagga Ubuntu devel *
Quagga Ubuntu trusty *
Quagga Ubuntu upstream *
Quagga Ubuntu xenial *

Potential Mitigations

References