BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service (stack consumption and daemon crash) via BGP mask expressions in birdc.
References
Link | Resource |
---|---|
https://gitlab.labs.nic.cz/labs/bird/commit/e8bc64e308586b6502090da2775af84cd760ed0d | Issue Tracking Patch Third Party Advisory |
https://gitlab.labs.nic.cz/labs/bird/blob/v1.6.4/NEWS#L11 | Issue Tracking Third Party Advisory |
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=900967 | Issue Tracking Third Party Advisory |
http://bird.network.cz | Third Party Advisory |
Configurations
Information
Published : 2018-06-08 07:29
Updated : 2018-07-20 08:25
NVD link : CVE-2018-12066
Mitre link : CVE-2018-12066
JSON object : View
CWE
CWE-400
Uncontrolled Resource Consumption
Products Affected
bird_project
- bird