CVE-2017-5495 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-5495 Interim 1 43 2025-03-25T00:59:50Z current 2021-05-30T13:52:41Z 2025-03-25T00:59:50Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-5495 All versions of Quagga, 0.93 through 1.1.0, are vulnerable to an unbounded memory allocation in the telnet 'vty' CLI, leading to a Denial-of-Service of Quagga daemons, or even the entire host. When Quagga daemons are configured with their telnet CLI enabled, anyone who can connect to the TCP ports can trigger this vulnerability, prior to authentication. Most distributions restrict the Quagga telnet interface to local access only by default. The Quagga telnet interface 'vty' input buffer grows automatically, without bound, so long as a newline is not entered. This allows an attacker to cause the Quagga daemon to allocate unbounded memory by sending very long strings without a newline. Eventually the daemon is terminated by the system, or the system itself runs out of memory. This is fixed in Quagga 1.1.1 and Free Range Routing (FRR) Protocol Suite 2017-01-10. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2017-August/003168.html E-Mail link for SUSE-SU-2017:2294-1 https://lists.suse.com/pipermail/sle-security-updates/2018-February/003733.html E-Mail link for SUSE-SU-2018:0455-1 https://lists.suse.com/pipermail/sle-security-updates/2018-February/003735.html E-Mail link for SUSE-SU-2018:0457-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Manager Retail Branch Server 4.0 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Manager Server 4.0 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE OpenStack Cloud 6 openSUSE Tumbleweed libfpm_pb0 libfpm_pb0-1.1.1-17.3.3 libfpm_pb0-1.1.1-2.29 libfpm_pb0-1.2.4-2.14 libospf0 libospf0-1.1.1-17.3.3 libospf0-1.1.1-17.7.1 libospf0-1.1.1-2.29 libospf0-1.2.4-2.14 libospfapiclient0 libospfapiclient0-1.1.1-17.3.3 libospfapiclient0-1.1.1-17.7.1 libospfapiclient0-1.1.1-2.29 libospfapiclient0-1.2.4-2.14 libquagga_pb0 libquagga_pb0-1.1.1-17.3.3 libquagga_pb0-1.1.1-17.7.1 libquagga_pb0-1.1.1-2.29 libquagga_pb0-1.2.4-2.14 libzebra1 libzebra1-1.1.1-17.3.3 libzebra1-1.1.1-17.7.1 libzebra1-1.1.1-2.29 libzebra1-1.2.4-2.14 quagga quagga-0.99.15-0.30.3.1 quagga-0.99.22.1-16.4.1 quagga-1.1.1-17.3.3 quagga-1.1.1-17.7.1 quagga-1.1.1-2.29 quagga-1.2.4-2.14 quagga-devel quagga-devel-0.99.15-0.30.3.1 quagga-devel-1.1.1-17.3.3 quagga-devel-1.1.1-17.7.1 quagga-devel-1.1.1-2.29 quagga-devel-1.2.4-2.14 libospf0-1.1.1-17.7.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libospfapiclient0-1.1.1-17.7.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libquagga_pb0-1.1.1-17.7.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libzebra1-1.1.1-17.7.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 quagga-1.1.1-17.7.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libfpm_pb0-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 libospf0-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 libospfapiclient0-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 libquagga_pb0-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 libzebra1-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 quagga-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 quagga-devel-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 libfpm_pb0-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 libospf0-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 libospfapiclient0-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 libquagga_pb0-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 libzebra1-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 quagga-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 quagga-devel-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 libfpm_pb0-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libospf0-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libospfapiclient0-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libquagga_pb0-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libzebra1-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 quagga-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 quagga-devel-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libfpm_pb0-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 libospf0-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 libospfapiclient0-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 libquagga_pb0-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 libzebra1-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 quagga-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 quagga-devel-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 libfpm_pb0-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libospf0-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libospfapiclient0-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libquagga_pb0-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libzebra1-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 quagga-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 quagga-devel-1.1.1-2.29 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 quagga-0.99.15-0.30.3.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 quagga-0.99.15-0.30.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA quagga-0.99.15-0.30.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS quagga-0.99.15-0.30.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA quagga-0.99.15-0.30.3.1 as a component of SUSE Linux Enterprise Server 11 SP4 quagga-0.99.22.1-16.4.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libfpm_pb0-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server 12 SP2 libospf0-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server 12 SP2 libospfapiclient0-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server 12 SP2 libquagga_pb0-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server 12 SP2 libzebra1-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server 12 SP2 quagga-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server 12 SP2 libfpm_pb0-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server 12 SP3 libospf0-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server 12 SP3 libospfapiclient0-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server 12 SP3 libquagga_pb0-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server 12 SP3 libzebra1-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server 12 SP3 quagga-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server 12 SP3 libospf0-1.1.1-17.7.1 as a component of SUSE Linux Enterprise Server 12 SP4 libospfapiclient0-1.1.1-17.7.1 as a component of SUSE Linux Enterprise Server 12 SP4 libquagga_pb0-1.1.1-17.7.1 as a component of SUSE Linux Enterprise Server 12 SP4 libzebra1-1.1.1-17.7.1 as a component of SUSE Linux Enterprise Server 12 SP4 quagga-1.1.1-17.7.1 as a component of SUSE Linux Enterprise Server 12 SP4 libospf0-1.1.1-17.7.1 as a component of SUSE Linux Enterprise Server 12 SP5 libospfapiclient0-1.1.1-17.7.1 as a component of SUSE Linux Enterprise Server 12 SP5 libquagga_pb0-1.1.1-17.7.1 as a component of SUSE Linux Enterprise Server 12 SP5 libzebra1-1.1.1-17.7.1 as a component of SUSE Linux Enterprise Server 12 SP5 quagga-1.1.1-17.7.1 as a component of SUSE Linux Enterprise Server 12 SP5 quagga-0.99.22.1-16.4.1 as a component of SUSE Linux Enterprise Server 12-LTSS libfpm_pb0-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libospf0-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libospfapiclient0-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libquagga_pb0-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libzebra1-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 quagga-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 quagga-0.99.15-0.30.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 quagga-0.99.22.1-16.4.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libfpm_pb0-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libospf0-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libospfapiclient0-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libquagga_pb0-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libzebra1-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 quagga-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libfpm_pb0-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libospf0-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libospfapiclient0-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libquagga_pb0-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libzebra1-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 quagga-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libospf0-1.1.1-17.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libospfapiclient0-1.1.1-17.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libquagga_pb0-1.1.1-17.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libzebra1-1.1.1-17.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 quagga-1.1.1-17.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 quagga-0.99.15-0.30.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 quagga-devel-0.99.15-0.30.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 quagga-devel-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 quagga-devel-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 quagga-devel-1.1.1-17.7.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 quagga-devel-1.1.1-17.3.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 quagga-0.99.22.1-16.4.1 as a component of SUSE OpenStack Cloud 6 libfpm_pb0-1.2.4-2.14 as a component of openSUSE Tumbleweed libospf0-1.2.4-2.14 as a component of openSUSE Tumbleweed libospfapiclient0-1.2.4-2.14 as a component of openSUSE Tumbleweed libquagga_pb0-1.2.4-2.14 as a component of openSUSE Tumbleweed libzebra1-1.2.4-2.14 as a component of openSUSE Tumbleweed quagga-1.2.4-2.14 as a component of openSUSE Tumbleweed quagga-devel-1.2.4-2.14 as a component of openSUSE Tumbleweed libfpm_pb0 as a component of SUSE CaaS Platform 4.0 libospf0 as a component of SUSE CaaS Platform 4.0 libospfapiclient0 as a component of SUSE CaaS Platform 4.0 libquagga_pb0 as a component of SUSE CaaS Platform 4.0 libzebra1 as a component of SUSE CaaS Platform 4.0 quagga as a component of SUSE CaaS Platform 4.0 quagga-devel as a component of SUSE CaaS Platform 4.0 quagga as a component of SUSE Enterprise Storage 6 libfpm_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libospf0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libospfapiclient0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libquagga_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libzebra1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS quagga as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS quagga-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libfpm_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libospf0 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libospfapiclient0 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libquagga_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libzebra1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS quagga as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS quagga-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libfpm_pb0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libospf0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libospfapiclient0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libquagga_pb0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libzebra1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 quagga as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 quagga-devel as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 quagga as a component of SUSE Linux Enterprise Server 11 SP4 LTSS libfpm_pb0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libospf0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libospfapiclient0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libquagga_pb0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libzebra1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS quagga as a component of SUSE Linux Enterprise Server 15 SP1-LTSS quagga-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS quagga as a component of SUSE Linux Enterprise Server 15-ESPOS libfpm_pb0 as a component of SUSE Linux Enterprise Server 15-LTSS libospf0 as a component of SUSE Linux Enterprise Server 15-LTSS libospfapiclient0 as a component of SUSE Linux Enterprise Server 15-LTSS libquagga_pb0 as a component of SUSE Linux Enterprise Server 15-LTSS libzebra1 as a component of SUSE Linux Enterprise Server 15-LTSS quagga as a component of SUSE Linux Enterprise Server 15-LTSS quagga-devel as a component of SUSE Linux Enterprise Server 15-LTSS quagga as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 libfpm_pb0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libospf0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libospfapiclient0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libquagga_pb0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libzebra1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 quagga as a component of SUSE Linux Enterprise Server for SAP Applications 15 quagga-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 libfpm_pb0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libospf0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libospfapiclient0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libquagga_pb0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libzebra1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 quagga as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 quagga-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 quagga as a component of SUSE Manager Proxy 4.0 quagga as a component of SUSE Manager Retail Branch Server 4.0 quagga as a component of SUSE Manager Server 4.0 All versions of Quagga, 0.93 through 1.1.0, are vulnerable to an unbounded memory allocation in the telnet 'vty' CLI, leading to a Denial-of-Service of Quagga daemons, or even the entire host. When Quagga daemons are configured with their telnet CLI enabled, anyone who can connect to the TCP ports can trigger this vulnerability, prior to authentication. Most distributions restrict the Quagga telnet interface to local access only by default. The Quagga telnet interface 'vty' input buffer grows automatically, without bound, so long as a newline is not entered. This allows an attacker to cause the Quagga daemon to allocate unbounded memory by sending very long strings without a newline. Eventually the daemon is terminated by the system, or the system itself runs out of memory. This is fixed in Quagga 1.1.1 and Free Range Routing (FRR) Protocol Suite 2017-01-10. CVE-2017-5495 SUSE Linux Enterprise High Performance Computing 12 SP5:libospf0-1.1.1-17.7.1 SUSE Linux Enterprise High Performance Computing 12 SP5:libospfapiclient0-1.1.1-17.7.1 SUSE Linux Enterprise High Performance Computing 12 SP5:libquagga_pb0-1.1.1-17.7.1 SUSE Linux Enterprise High Performance Computing 12 SP5:libzebra1-1.1.1-17.7.1 SUSE Linux Enterprise High Performance Computing 12 SP5:quagga-1.1.1-17.7.1 SUSE Linux Enterprise Module for Server Applications 15:libfpm_pb0-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15:libospf0-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15:libospfapiclient0-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15:libquagga_pb0-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15:libzebra1-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15:quagga-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15:quagga-devel-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP1:libfpm_pb0-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP1:libospf0-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP1:libospfapiclient0-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP1:libquagga_pb0-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP1:libzebra1-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP1:quagga-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP1:quagga-devel-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP2:libfpm_pb0-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP2:libospf0-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP2:libospfapiclient0-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP2:libquagga_pb0-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP2:libzebra1-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP2:quagga-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP2:quagga-devel-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP3:libfpm_pb0-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP3:libospf0-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP3:libospfapiclient0-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP3:libquagga_pb0-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP3:libzebra1-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP3:quagga-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP3:quagga-devel-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP4:libfpm_pb0-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP4:libospf0-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP4:libospfapiclient0-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP4:libquagga_pb0-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP4:libzebra1-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP4:quagga-1.1.1-2.29 SUSE Linux Enterprise Module for Server Applications 15 SP4:quagga-devel-1.1.1-2.29 SUSE Linux Enterprise Point of Sale 11 SP3:quagga-0.99.15-0.30.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:quagga-0.99.15-0.30.3.1 SUSE Linux Enterprise Server 11 SP3-LTSS:quagga-0.99.15-0.30.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:quagga-0.99.15-0.30.3.1 SUSE Linux Enterprise Server 11 SP4:quagga-0.99.15-0.30.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:quagga-0.99.22.1-16.4.1 SUSE Linux Enterprise Server 12 SP2:libfpm_pb0-1.1.1-17.3.3 SUSE Linux Enterprise Server 12 SP2:libospf0-1.1.1-17.3.3 SUSE Linux Enterprise Server 12 SP2:libospfapiclient0-1.1.1-17.3.3 SUSE Linux Enterprise Server 12 SP2:libquagga_pb0-1.1.1-17.3.3 SUSE Linux Enterprise Server 12 SP2:libzebra1-1.1.1-17.3.3 SUSE Linux Enterprise Server 12 SP2:quagga-1.1.1-17.3.3 SUSE Linux Enterprise Server 12 SP3:libfpm_pb0-1.1.1-17.3.3 SUSE Linux Enterprise Server 12 SP3:libospf0-1.1.1-17.3.3 SUSE Linux Enterprise Server 12 SP3:libospfapiclient0-1.1.1-17.3.3 SUSE Linux Enterprise Server 12 SP3:libquagga_pb0-1.1.1-17.3.3 SUSE Linux Enterprise Server 12 SP3:libzebra1-1.1.1-17.3.3 SUSE Linux Enterprise Server 12 SP3:quagga-1.1.1-17.3.3 SUSE Linux Enterprise Server 12 SP4:libospf0-1.1.1-17.7.1 SUSE Linux Enterprise Server 12 SP4:libospfapiclient0-1.1.1-17.7.1 SUSE Linux Enterprise Server 12 SP4:libquagga_pb0-1.1.1-17.7.1 SUSE Linux Enterprise Server 12 SP4:libzebra1-1.1.1-17.7.1 SUSE Linux Enterprise Server 12 SP4:quagga-1.1.1-17.7.1 SUSE Linux Enterprise Server 12 SP5:libospf0-1.1.1-17.7.1 SUSE Linux Enterprise Server 12 SP5:libospfapiclient0-1.1.1-17.7.1 SUSE Linux Enterprise Server 12 SP5:libquagga_pb0-1.1.1-17.7.1 SUSE Linux Enterprise Server 12 SP5:libzebra1-1.1.1-17.7.1 SUSE Linux Enterprise Server 12 SP5:quagga-1.1.1-17.7.1 SUSE Linux Enterprise Server 12-LTSS:quagga-0.99.22.1-16.4.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libfpm_pb0-1.1.1-17.3.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libospf0-1.1.1-17.3.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libospfapiclient0-1.1.1-17.3.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libquagga_pb0-1.1.1-17.3.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libzebra1-1.1.1-17.3.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:quagga-1.1.1-17.3.3 SUSE Linux Enterprise Server for SAP Applications 11 SP4:quagga-0.99.15-0.30.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:quagga-0.99.22.1-16.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libfpm_pb0-1.1.1-17.3.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libospf0-1.1.1-17.3.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libospfapiclient0-1.1.1-17.3.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libquagga_pb0-1.1.1-17.3.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libzebra1-1.1.1-17.3.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:quagga-1.1.1-17.3.3 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libfpm_pb0-1.1.1-17.3.3 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libospf0-1.1.1-17.3.3 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libospfapiclient0-1.1.1-17.3.3 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libquagga_pb0-1.1.1-17.3.3 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libzebra1-1.1.1-17.3.3 SUSE Linux Enterprise Server for SAP Applications 12 SP3:quagga-1.1.1-17.3.3 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libospf0-1.1.1-17.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libospfapiclient0-1.1.1-17.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libquagga_pb0-1.1.1-17.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libzebra1-1.1.1-17.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:quagga-1.1.1-17.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:quagga-0.99.15-0.30.3.1 SUSE Linux Enterprise Software Development Kit 11 SP4:quagga-devel-0.99.15-0.30.3.1 SUSE Linux Enterprise Software Development Kit 12 SP2:quagga-devel-1.1.1-17.3.3 SUSE Linux Enterprise Software Development Kit 12 SP3:quagga-devel-1.1.1-17.3.3 SUSE Linux Enterprise Software Development Kit 12 SP4:quagga-devel-1.1.1-17.7.1 SUSE Linux Enterprise Software Development Kit 12 SP5:quagga-devel-1.1.1-17.3.3 SUSE OpenStack Cloud 6:quagga-0.99.22.1-16.4.1 openSUSE Tumbleweed:libfpm_pb0-1.2.4-2.14 openSUSE Tumbleweed:libospf0-1.2.4-2.14 openSUSE Tumbleweed:libospfapiclient0-1.2.4-2.14 openSUSE Tumbleweed:libquagga_pb0-1.2.4-2.14 openSUSE Tumbleweed:libzebra1-1.2.4-2.14 openSUSE Tumbleweed:quagga-1.2.4-2.14 openSUSE Tumbleweed:quagga-devel-1.2.4-2.14 SUSE CaaS Platform 4.0:libfpm_pb0 SUSE CaaS Platform 4.0:libospf0 SUSE CaaS Platform 4.0:libospfapiclient0 SUSE CaaS Platform 4.0:libquagga_pb0 SUSE CaaS Platform 4.0:libzebra1 SUSE CaaS Platform 4.0:quagga SUSE CaaS Platform 4.0:quagga-devel SUSE Enterprise Storage 6:quagga SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libfpm_pb0 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libospf0 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libospfapiclient0 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libquagga_pb0 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libzebra1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:quagga SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:quagga-devel SUSE Linux Enterprise High Performance Computing 15-LTSS:libfpm_pb0 SUSE Linux Enterprise High Performance Computing 15-LTSS:libospf0 SUSE Linux Enterprise High Performance Computing 15-LTSS:libospfapiclient0 SUSE Linux Enterprise High Performance Computing 15-LTSS:libquagga_pb0 SUSE Linux Enterprise High Performance Computing 15-LTSS:libzebra1 SUSE Linux Enterprise High Performance Computing 15-LTSS:quagga SUSE Linux Enterprise High Performance Computing 15-LTSS:quagga-devel SUSE Linux Enterprise Module for Server Applications 15 SP2:libfpm_pb0 SUSE Linux Enterprise Module for Server Applications 15 SP2:libospf0 SUSE Linux Enterprise Module for Server Applications 15 SP2:libospfapiclient0 SUSE Linux Enterprise Module for Server Applications 15 SP2:libquagga_pb0 SUSE Linux Enterprise Module for Server Applications 15 SP2:libzebra1 SUSE Linux Enterprise Module for Server Applications 15 SP2:quagga SUSE Linux Enterprise Module for Server Applications 15 SP2:quagga-devel SUSE Linux Enterprise Server 15 SP1-LTSS:libfpm_pb0 SUSE Linux Enterprise Server 15 SP1-LTSS:libospf0 SUSE Linux Enterprise Server 15 SP1-LTSS:libospfapiclient0 SUSE Linux Enterprise Server 15 SP1-LTSS:libquagga_pb0 SUSE Linux Enterprise Server 15 SP1-LTSS:libzebra1 SUSE Linux Enterprise Server 15 SP1-LTSS:quagga SUSE Linux Enterprise Server 15 SP1-LTSS:quagga-devel SUSE Linux Enterprise Server 15-ESPOS:quagga SUSE Linux Enterprise Server 15-LTSS:libfpm_pb0 SUSE Linux Enterprise Server 15-LTSS:libospf0 SUSE Linux Enterprise Server 15-LTSS:libospfapiclient0 SUSE Linux Enterprise Server 15-LTSS:libquagga_pb0 SUSE Linux Enterprise Server 15-LTSS:libzebra1 SUSE Linux Enterprise Server 15-LTSS:quagga SUSE Linux Enterprise Server 15-LTSS:quagga-devel SUSE Linux Enterprise Server Business Critical Linux 15 SP1:quagga SUSE Linux Enterprise Server for SAP Applications 15 SP1:libfpm_pb0 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libospf0 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libospfapiclient0 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libquagga_pb0 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libzebra1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:quagga SUSE Linux Enterprise Server for SAP Applications 15 SP1:quagga-devel SUSE Linux Enterprise Server for SAP Applications 15:libfpm_pb0 SUSE Linux Enterprise Server for SAP Applications 15:libospf0 SUSE Linux Enterprise Server for SAP Applications 15:libospfapiclient0 SUSE Linux Enterprise Server for SAP Applications 15:libquagga_pb0 SUSE Linux Enterprise Server for SAP Applications 15:libzebra1 SUSE Linux Enterprise Server for SAP Applications 15:quagga SUSE Linux Enterprise Server for SAP Applications 15:quagga-devel SUSE Manager Proxy 4.0:quagga SUSE Manager Retail Branch Server 4.0:quagga SUSE Manager Server 4.0:quagga moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H