[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5XUrb-i7lSFJIQlmxCJkFsMJIoPHAEaJZI2k5WGDIbg":3,"g5a-risk:CVE-2018-5381":225},{"success":4,"data":5,"meta":223},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":15,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":84,"references":85,"referencesCount":122,"weaknesses":123,"weaknessesCount":138,"isActivelyExploited":139,"cisaInfo":15,"otxData":15,"relatedBlogPosts":140,"seoMetadata":141,"configurations":166,"relatedVendorCves":207,"notableEvents":208},"CVE-2018-5381","What is CVE-2018-5381?","The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of \"Capabilities\" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function. The parser can enter an infinite loop on invalid capabilities if a Multi-Protocol capability does not have a recognized AFI\u002FSAFI, causing a denial of service.","The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of \"Capabilities\" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_p...","2018-02-19T13:29:00.583","2019-10-09T23:41:15.877",7.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":37,"CVSSMetricV40":15},null,[17,29],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",3.9,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":36,"ImpactScore":28},"cret@cert.org","Secondary",{"Version":21,"VectorString":33,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":26,"BaseScore":34,"BaseSeverity":35,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",6.5,"MEDIUM",2.8,[38],{"Source":18,"Type":19,"CVSSData":39,"BaseSeverity":35,"ExploitabilityScore":44,"ImpactScore":45,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":40,"VectorString":41,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":42,"BaseScore":43,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,10,2.9,0.30162,[46,46,46,46,46,46,46],"High",[50,54,59,62,65,70,73,76,80],{"vendor":51,"product":51,"version":52,"criteria":53,"vulnerable":4},"quagga","*","cpe:2.3:a:quagga:quagga:*:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":57,"criteria":58,"vulnerable":4},"canonical","ubuntu_linux","14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",{"vendor":55,"product":56,"version":60,"criteria":61,"vulnerable":4},"16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":55,"product":56,"version":63,"criteria":64,"vulnerable":4},"17.10","cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",{"vendor":66,"product":67,"version":68,"criteria":69,"vulnerable":4},"debian","debian_linux","7.0","cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",{"vendor":66,"product":67,"version":71,"criteria":72,"vulnerable":4},"8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":66,"product":67,"version":74,"criteria":75,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":77,"product":78,"version":52,"criteria":79,"vulnerable":4},"siemens","ruggedcom_rox_ii_firmware","cpe:2.3:o:siemens:ruggedcom_rox_ii_firmware:*:*:*:*:*:*:*:*",{"vendor":77,"product":81,"version":82,"criteria":83,"vulnerable":4},"ruggedcom_rox_ii","-","cpe:2.3:h:siemens:ruggedcom_rox_ii:-:*:*:*:*:*:*:*",9,[86,91,96,101,106,111,115,119],{"url":87,"source":88,"tags":89},"http:\u002F\u002Fsavannah.nongnu.org\u002Fforum\u002Fforum.php?forum_id=9095","Nongnu",[90],"Third Party Advisory",{"url":92,"source":93,"tags":94},"http:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F940439","Cert",[90,95],"US Government Resource",{"url":97,"source":98,"tags":99},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fpdf\u002Fssa-451142.pdf","Siemens",[100,90],"Mitigation",{"url":102,"source":103,"tags":104},"https:\u002F\u002Fgogs.quagga.net\u002FQuagga\u002Fquagga\u002Fsrc\u002Fmaster\u002Fdoc\u002Fsecurity\u002FQuagga-2018-1975.txt","Quagga",[105],"Vendor Advisory",{"url":107,"source":108,"tags":109},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2018\u002F02\u002Fmsg00021.html","Debian",[110,90],"Mailing List",{"url":112,"source":113,"tags":114},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201804-17","Gentoo",[90],{"url":116,"source":117,"tags":118},"https:\u002F\u002Fusn.ubuntu.com\u002F3573-1\u002F","Ubuntu",[90],{"url":120,"source":108,"tags":121},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2018\u002Fdsa-4115",[90],8,[124,132],{"id":125,"name":126,"description":127,"extendedDescription":128,"status":129,"abstraction":130,"structure":131},"CWE-228","Improper Handling of Syntactically Invalid Structure","The product does not handle or incorrectly handles input that is not syntactically well-formed with respect to the associated specification.","","Incomplete","Class","Simple",{"id":133,"name":134,"description":135,"extendedDescription":136,"status":129,"abstraction":137,"structure":131},"CWE-835","Loop with Unreachable Exit Condition ('Infinite Loop')","The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.","If the loop can be influenced by an attacker, this weakness could allow attackers to consume excessive resources such as CPU or memory.","Base",2,false,[],{"title":142,"metaDescription":143,"keywords":144,"canonicalUrl":145,"structuredData":146},"What is CVE-2018-5381? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-5381, a high severity cyber security vulnerability from 2018. High exploit probability (30.2%). The Quagga BGP daemon (bgp...","CVE-2018-5381, CVE-2018-5381 vulnerability, CVE-2018-5381 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, quagga security, canonical security, debian security, siemens security, quagga vulnerability, ubuntu_linux vulnerability, debian_linux vulnerability, ruggedcom_rox_ii_firmware vulnerability","\u002Fwhat-is\u002Fcve-2018-5381",{"@context":147,"@type":148,"headline":142,"description":143,"datePublished":10,"dateModified":11,"author":149,"publisher":153,"about":157,"mainEntityOfPage":161,"articleSection":164,"keywords":165},"https:\u002F\u002Fschema.org","TechArticle",{"@type":150,"name":151,"url":152},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":150,"name":151,"url":152,"logo":154},{"@type":155,"url":156},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":158,"name":6,"description":159,"additionalType":160},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":162,"@id":163},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-5381","Cybersecurity","CVE-2018-5381, CVE-2018-5381 vulnerability, CVE-2018-5381 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[167,175,185,195],{"Operator":15,"Negate":15,"Nodes":168},[169],{"Operator":170,"Negate":15,"CPEMatch":171},"OR",[172],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":173,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":174},"5117934B-9B41-4ECF-807D-252F6CA1CF97","1.2.2",{"Operator":15,"Negate":15,"Nodes":176},[177],{"Operator":170,"Negate":15,"CPEMatch":178},[179,181,183],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":180,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B5A6F2F3-4894-4392-8296-3B8DD2679084",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":182,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":184,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9070C9D8-A14A-467F-8253-33B966C16886",{"Operator":15,"Negate":15,"Nodes":186},[187],{"Operator":170,"Negate":15,"CPEMatch":188},[189,191,193],{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":190,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"16F59A04-14CF-49E2-9973-645477EA09DA",{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":192,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":194,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Operator":196,"Negate":15,"Nodes":197},"AND",[198,203],{"Operator":170,"Negate":15,"CPEMatch":199},[200],{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":201,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":202,"VersionEndIncluding":15},"CBDC4817-0B21-45A9-A384-AECE46E2EBC2","2.13.0",{"Operator":170,"Negate":15,"CPEMatch":204},[205],{"Vulnerable":15,"Criteria":83,"MatchCriteriaID":206,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1EA04F52-40D0-4A4B-9767-265A26EFD98D",[],[209,216],{"id":210,"eventType":211,"eventTime":212,"details":213,"label":214,"color":215},"8cfe6e88-2c24-426b-a138-dc71a859368e","HIGH_EPSS_DELTA","2025-11-19T04:06:44.92536+00:00","Daily EPSS score increased by 0.128 on 2023-12-30","EPSS Score Increased","red",{"id":217,"eventType":218,"eventTime":219,"details":220,"label":221,"color":222},"f24af6a8-4db1-4da9-8602-e4d054fc3cad","LOW_EPSS_DELTA","2025-11-22T04:06:32.885478+00:00","Daily EPSS score decreased by 0.132 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":224,"version":40},1792350216192,{"score":226,"band":227,"action":228,"scoredAt":229},49,"Medium","Plan remediation","2026-10-16T06:43:27.526888+00:00"]