Most recent entries from all

bdu:2019-03925

certfr-2019-avi-151 — De multiples vulnérabilités ont été découvertes dans les produits Siemens. Elles permettent à un attaquant de provoquer…

certfr-2019-avi-151

EUVD-2026-179254

fkie_cve-2018-5380

The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input.

GHSA-265f-c4jh-jcfq

The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input.

gsd-2018-5380

ICSA-19-099-05 — ICSA-19-099-05 Siemens RUGGEDCOM ROX II

The shipped version of the Quagga BGP daemon (bgpd) can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes. A successful attack could cause a denial of service or potentially allow an attacker to execute arbitrary code. The security vulnerability could be exploited by an attacker spoofing a malicious BGP UPDATE message within the network. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality, integrity and availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known. The shipped version of the Quagga BGP daemon (bgpd) can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input. The security vulnerability could be exploited by an attacker spoofing a malicious BGP code-point. Successful exploitation requires the attacker to be in the position of a configured, trusted BGP peer. No system privileges and no user interaction is required. An attacker could use the vulnerability to insert binary data into the internal log files. At the time of advisory publication no public exploitation of this security vulnerability was known. The shipped version of the Quagga BGP daemon (bgpd) has a bug in its parsing of "Capabilities" in BGP OPEN messages. The parser can enter an infinite loop on invalid capabilitie…

openSUSE-SU-2024:11290-1 — libfpm_pb0-1.2.4-2.14 on GA media

libfpm_pb0-1.2.4-2.14 on GA media

SUSE-SU-2018:0455-1 — Security update for quagga

Security update for quagga

UBUNTU-CVE-2018-5380

Affected: Ubuntu:14.04:LTS: quagga, Ubuntu:16.04:LTS: quagga

The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input.

WID-SEC-W-2024-2213 — quagga: Mehrere Schwachstellen

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in quagga ausnutzen um Informationen offenzulegen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen und um einen Denial of Service Zustand herbeizuführen.