The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input. https://nvd.nist.gov/vuln/detail/CVE-2018-5380