Description
BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service (stack consumption and daemon crash) via BGP mask expressions in birdc.
References (4)
Core 4
Core References
Issue Tracking, Third Party Advisory x_refsource_confirm
https://gitlab.labs.nic.cz/labs/bird/blob/v1.6.4/NEWS#L11
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://gitlab.labs.nic.cz/labs/bird/commit/e8bc64e308586b6502090da2775af84cd760ed0d
Third Party Advisory x_refsource_confirm
http://bird.network.cz
Issue Tracking, Third Party Advisory x_refsource_confirm
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=900967
Scores
CVSS v3
5.5
EPSS
0.0038
EPSS Percentile
29.9%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-400
Status
published
Products (1)
bird_project/bird
< 1.6.4
Published
Jun 08, 2018
Tracked Since
Feb 18, 2026