CVE-2018-5380CWE-125

The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input

Medium · published February 19, 2018

CVSS v3.0

4.3

EPSS

15%

Percentile

96.7

In the wild

Unconfirmed

What it is

The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input.

The record

Technical detail

CVSS v3.0: 4.3 · MEDIUM
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0: Not supplied
EPSS: 0.14836 · 96.7th percentile
Weakness: CWE-125 · Out-of-bounds Read
Published: 2018-02-19T13:00Z

EPSS history

Timeline

19 FEB 13:00Z
The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input
cvelistv5