CVSS 3.0
5.9 mediumCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:HCVE-2018-5378
Medium (5.9). EPSS 74% chance of exploitation in the next 30 days.
The Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute length is invalid. Arbitrary data from the bgpd process may be sent over the network to a peer and/or bgpd may crash.
Severity
- EPSS
- 74% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-11-01)
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- debian:debian_linux
- quagga:quagga