CVE-2018-5379: Double Free

Published Feb 7, 2018
·
Updated

Last updated 25 August 2025

Other sources

The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes. A successful attack could cause a denial of service or potentially allow an attacker to execute arbitrary code.

Launchpad

The Quagga BGP daemon, bgpd, can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes.

This issue can be triggered by an optional/transitive UPDATE attribute, that all conforming eBGP speakers should pass along. This means this may triggerable in many affected Quagga bgpd processes across a wide area of a network, because of just one UPDATE message.

This issue could result in a crash of bgpd, or even allow a remote attacker to gain control of an affected bgpd process.

All versions are likely affected.

Red Hat

Affected Software

22 affected componentsFixes available
redhat/quagga<1.2.3
1.2.3
debian/quagga
Quagga Quagga<=1.2.2
Debian Debian Linux=7.0
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=17.10
redhat Enterprise Linux Server=7.0
redhat Enterprise Linux Server Aus=7.4
redhat Enterprise Linux Server Aus=7.6
redhat Enterprise Linux Server Eus=7.4
redhat Enterprise Linux Server Eus=7.5
redhat Enterprise Linux Server Eus=7.6
redhat Enterprise Linux Server Tus=7.4
redhat Enterprise Linux Server Tus=7.6
redhat Enterprise Linux Workstation=7.0
All of the following
Siemens Ruggedcom Rox Ii Firmware<2.13.0
Siemens Ruggedcom Rox Ii
Siemens Ruggedcom Rox Ii Firmware<2.13.0
Siemens Ruggedcom Rox Ii

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/quagga to a version that resolves this vulnerability.

    Fixed in 1.2.3
  2. Upgrade

    Upgrade Quagga BGP daemon (bgpd) to a version that resolves this vulnerability.

    Fixed in 1.2.3
  3. Compensating control

    Mitigate by filtering/dropping malformed BGP UPDATE messages that include cluster-list and/or unknown optional/transitive attributes at network eBGP speaker boundaries (since the triggering UPDATE attribute is optional/transitive and should be passed along by conforming eBGP speakers).

Event History

Feb 19, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:29 PM
DescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·11:08 PM
Description
Jul 3, 2026
Data Sourced
via Ubuntu·02:44 AM
RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

1

What is CVE-2018-5379?

CVE-2018-5379 is a vulnerability that exists in the Quagga BGP daemon (bgpd) prior to version 1.2.3.

2

What is the severity of CVE-2018-5379?

The severity of CVE-2018-5379 is critical with a CVSS score of 9.8.

3

How does CVE-2018-5379 impact affected software?

CVE-2018-5379 can cause a denial of service or potentially allow an attacker to execute arbitrary code.

4

Which software versions are affected by CVE-2018-5379?

Versions prior to 1.2.3 of the Quagga BGP daemon (bgpd) are affected by CVE-2018-5379.

5

How can CVE-2018-5379 be fixed?

To fix CVE-2018-5379, update the Quagga BGP daemon (bgpd) to version 1.2.3 or later.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203