SUSE 12-SP3 Important Advisory: Quagga Denial-of-Service Threat
suse
February 16, 2018
An update that fixes 5 vulnerabilities is now available.
Summary
This update for quagga fixes the security following issues: - The Quagga BGP daemon contained a bug in the AS_PATH size calculation that could have been exploited to facilitate a remote denial-of-service attack via specially crafted BGP UPDATE messages. [CVE-2017-16227, bsc#1065641] - The Quagga BGP daemon did not check whether data sent to peers via NOTIFY had an invalid attribute length. It was possible to exploit this issue and cause the bgpd process to leak sensitive information over the network to a configured peer. [CVE-2018-5378, bsc#1079798] - The Quagga BGP daemon used to double-free memory when processing certain forms of UPDATE messages. This issue could be exploited by sending an
Topics Covered
References
#1065641 #1079798 #1079799 #1079800 #1079801
Cross- CVE-2017-16227 CVE-2018-5378 CVE-2018-5379
CVE-2018-5380 CVE-2018-5381
Affected Products:
SUSE Linux Enterprise Software Development Kit 12-SP3
SUSE Linux Enterprise Software Development Kit 12-SP2
SUSE Linux Enterprise Server for Raspberry Pi 12-SP2
SUSE Linux Enterprise Server 12-SP3
SUSE Linux Enterprise Server 12-SP2
https://www.suse.com/security/cve/CVE-2017-16227.html
https://www.suse.com/security/cve/CVE-2018-5378.html
https://www.suse.com/security/cve/CVE-2018-5379.html
https://www.suse.com/security/cve/CVE-2018-5380.html
https://www.suse.com/security/cve/CVE-2018-5381.html
https://bugzilla.suse.com/1065641
https://bugzilla.suse.com/1079798
https://bugzilla.suse.com/1079799
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: SUSE-SU-2018:0456-1
Rating: important
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!