CVEs-PoC/2018/CVE-2018-5378.md

### [CVE-2018-5378](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5378)
![](https://img.shields.io/static/v1?label=Product&message=bgpd&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=bpgd1.2.3%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-119%3A%20Improper%20Restriction%20of%20Operations%20within%20the%20Bounds%20of%20a%20Memory%20Buffer&color=brighgreen)

### Description

The Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute length is invalid. Arbitrary data from the bgpd process may be sent over the network to a peer and/or bgpd may crash.

### POC

#### Reference
- http://www.kb.cert.org/vuls/id/940439

#### Github
- https://github.com/ARPSyndicate/cvemon