CVE-2019-16159
High
Description
BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer overflow. The BGP daemon's support for RFC 8203 administrative shutdown communication messages included an incorrect logical expression when checking the validity of an input message. Sending a shutdown communication with a sufficient message length causes a four-byte overflow to occur while processing the message, where two of the overflow bytes are attacker-controlled and two are fixed.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Nic Bird
PublishedSep 9, 2019
First seenSep 9, 2019
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nic bird | 1.6.0 ≤ v ≤ 1.6.7, 2.0.0 ≤ v ≤ 2.0.5 | — |
| opensuse backports_sle | 15.0 | — |
| fedoraproject fedora | 29, 30 | — |
| debian debian_linux | 10.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.