CVE-2018-5379

Name of the Vulnerable Software and Affected Versions Quagga versions prior to 1.2.3

Description The issue is related to the implementation of the BGP protocol in Quagga software, specifically a double-free memory error when handling certain forms of UPDATE messages that contain cluster-list and/or unknown attributes. This could allow a remote attacker to cause a denial of service or potentially execute arbitrary code.

Recommendations For versions prior to 1.2.3, update to version 1.2.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the BGP daemon to minimize the risk of exploitation.