#VU10618 Infinite loop in Quagga - CVE-2018-5381
Published: February 16, 2018
Vulnerability identifier: #VU10618
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2018-5381
CWE-ID: CWE-835
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
Quagga
Quagga
Software vendor:
quagga.net
quagga.net
Description
The vulnerability allows a remote attacker to cause DoS condition on the target system.
The weakness exists in the Quagga BGP daemon due to improper handling of invalid OPEN messages. A remote attacker can trigger infinite loop and cause the service to crash.
Successful exploitation of the vulnerability results in denial of service.
The weakness exists in the Quagga BGP daemon due to improper handling of invalid OPEN messages. A remote attacker can trigger infinite loop and cause the service to crash.
Successful exploitation of the vulnerability results in denial of service.
Remediation
Update to version 1.2.3.