Lucene search
RedHatRHSA-2018:0377HistoryFeb 28, 2018 - 4:24 p.m.
(RHSA-2018:0377) Important: quagga security update
2018-02-2816:24:10
access.redhat.com
67
0.056 Low
EPSS
Percentile
93.3%
The quagga packages contain Quagga, the free network-routing software suite that manages TCP/IP based protocols. Quagga supports the BGP4, BGP4+, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng protocols, and is intended to be used as a Route Server and Route Reflector.
Security Fix(es):
- quagga: Double free vulnerability in bgpd when processing certain forms of UPDATE message allowing to crash or potentially execute arbitrary code (CVE-2018-5379)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat would like to thank the Quagga project for reporting this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | aarch64 | quagga | < 0.99.22.4-5.el7_4 | quagga-0.99.22.4-5.el7_4.aarch64.rpm |
| RedHat | 7 | ppc64le | quagga-debuginfo | < 0.99.22.4-5.el7_4 | quagga-debuginfo-0.99.22.4-5.el7_4.ppc64le.rpm |
| RedHat | 7 | ppc64 | quagga-contrib | < 0.99.22.4-5.el7_4 | quagga-contrib-0.99.22.4-5.el7_4.ppc64.rpm |
| RedHat | 7 | s390x | quagga-devel | < 0.99.22.4-5.el7_4 | quagga-devel-0.99.22.4-5.el7_4.s390x.rpm |
| RedHat | 7 | i686 | quagga-devel | < 0.99.22.4-5.el7_4 | quagga-devel-0.99.22.4-5.el7_4.i686.rpm |
| RedHat | 7 | i686 | quagga-debuginfo | < 0.99.22.4-5.el7_4 | quagga-debuginfo-0.99.22.4-5.el7_4.i686.rpm |
| RedHat | 7 | ppc64le | quagga-devel | < 0.99.22.4-5.el7_4 | quagga-devel-0.99.22.4-5.el7_4.ppc64le.rpm |
| RedHat | 7 | s390 | quagga-devel | < 0.99.22.4-5.el7_4 | quagga-devel-0.99.22.4-5.el7_4.s390.rpm |
| RedHat | 7 | s390x | quagga | < 0.99.22.4-5.el7_4 | quagga-0.99.22.4-5.el7_4.s390x.rpm |
| RedHat | 7 | x86_64 | quagga-devel | < 0.99.22.4-5.el7_4 | quagga-devel-0.99.22.4-5.el7_4.x86_64.rpm |
Related
oraclelinux
oraclelinux
quagga security update
2018-02-28 00:00:00
nessus
nessus
RHEL 7 : quagga (RHSA-2018:0377)
2018-03-01 00:00:00
Oracle Linux 7 : quagga (ELSA-2018-0377)
2018-03-01 00:00:00
NewStart CGSL MAIN 5.04 : quagga Vulnerability (NS-SA-2019-0010)
2019-08-12 00:00:00
openvas
openvas
CentOS Update for quagga CESA-2018:0377 centos7
2018-03-14 00:00:00
Huawei EulerOS: Security Advisory for quagga (EulerOS-SA-2018-1064)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for quagga (EulerOS-SA-2018-1065)
2020-01-23 00:00:00
cve
cve
CVE-2018-5379
2018-02-19 13:29:00
CVE-2018-1000063
2018-02-16 14:29:00
ubuntucve
ubuntucve
CVE-2018-5379
2018-02-13 00:00:00
cvelist
cvelist
CVE-2018-5379
2018-02-15 00:00:00
checkpoint_advisories
checkpoint_advisories
Quagga BGP Daemon bgp_update_receive Double Free (CVE-2018-5379)
2019-02-18 00:00:00
prion
prion
Double free
2018-02-19 13:29:00
redhatcve
redhatcve
CVE-2018-5379
2018-02-16 00:48:51
nvd
nvd
CVE-2018-5379
2018-02-19 13:29:00
CVE-2018-1000063
2018-02-16 14:29:00
centos
centos
quagga security update
2018-03-10 11:52:43
debiancve
debiancve
CVE-2018-5379
2018-02-19 13:29:00
mageia
mageia
Updated quagga packages fix security vulnerability
2018-02-22 22:49:44
osv
osv
quagga - security update
2018-02-15 00:00:00
quagga - security update
2018-02-16 00:00:00
ics
ics
Siemens RUGGEDCOM ROX II
2019-04-09 12:00:00
amazon
amazon
Important: quagga
2018-02-20 21:26:00
debian
debian
[SECURITY] [DSA 4115-1] quagga security update
2018-02-15 22:25:18
[SECURITY] [DSA 4115-1] quagga security update
2018-02-15 22:25:18
[SECURITY] [DLA 1286-1] quagga security update
2018-02-16 22:32:14
gentoo
gentoo
Quagga: Multiple vulnerabilities
2018-04-22 00:00:00
f5
f5
cert
cert
Quagga bgpd is affected by multiple vulnerabilities
2018-02-15 00:00:00
ubuntu
ubuntu
Quagga vulnerabilities
2018-02-16 00:00:00
freebsd
freebsd
quagga -- several security issues
2018-01-31 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: quagga-1.2.2-2.fc26
2018-03-06 17:34:22
[SECURITY] Fedora 27 Update: quagga-1.2.2-2.fc27
2018-03-06 17:35:18
suse
suse
Security update for quagga (important)
2018-02-16 06:10:08
Security update for quagga (important)
2018-02-19 15:13:50
Security update for quagga (important)
2018-02-16 06:08:44