📄 BIRD 2.18 Stack Buffer Overflow / Denial of Service Scanner

This Metasploit auxiliary module is designed to assess a vulnerability in the BGP implementation of the BIRD Internet Routing Daemon. The module establishes a BGP session with a target router, performs standard protocol negotiation, and then sends a specially crafted BGP UPDATE message containing...

SUSE CVE-2026-49943

CZ.NIC BIRD Internet Routing Daemon through 2.19.0 contains a stack-based buffer overflow in the BGP ASPATH mask matching implementation in nest/a-path.c. The aspathmatch function uses a fixed-size stack array of 2048 + 1 pmpos entries, while parsepath expands ASPATH segments from a received BGP...

EUVD-2018-4049

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2018-12066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service stack consumption and daemon crash via BGP mask expressions in birdc...

CVE-2019-16159

BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer overflow. The BGP daemon's support for RFC 8203 administrative shutdown communication messages included an incorrect logical expression when checking the validity of an input message. Sending a shutdow...

CVE-2019-16159

BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer overflow. The BGP daemon's support for RFC 8203 administrative shutdown communication messages included an incorrect logical expression when checking the validity of an input message. Sending a shutdow...

UBUNTU-CVE-2019-16159

BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer overflow. The BGP daemon's support for RFC 8203 administrative shutdown communication messages included an incorrect logical expression when checking the validity of an input message. Sending a shutdow...

CVE-2019-16159

BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer overflow. The BGP daemon's support for RFC 8203 administrative shutdown communication messages included an incorrect logical expression when checking the validity of an input message. Sending a shutdow...

CVE-2019-16159

CVE-2019-16159 affects BIRD Internet Routing Daemon: stack-based buffer overflow in the BGP admin shutdown message handling. Affected: bird 1.6.x up to 1.6.7 and 2.x up to 2.0.5. Root cause: incorrect logical expression when validating an administrative shutdown message enables a four-byte overfl...

CVE-2019-16159

BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer overflow. The BGP daemon's support for RFC 8203 administrative shutdown communication messages included an incorrect logical expression when checking the validity of an input message. Sending a shutdow...

Code injection

BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service stack consumption and daemon crash via BGP mask expressions in birdc...

CVE-2018-12066

BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service stack consumption and daemon crash via BGP mask expressions in birdc...

CVE-2018-12066

BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service stack consumption and daemon crash via BGP mask expressions in birdc...

CVE-2018-12066

BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service stack consumption and daemon crash via BGP mask expressions in birdc...

CVE-2018-12066

BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service stack consumption and daemon crash via BGP mask expressions in birdc...

CVE-2018-12066

BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service stack consumption and daemon crash via BGP mask expressions in birdc...

CVE-2018-12066

CVE-2018-12066 affects the BIRD Internet Routing Daemon prior to 1.6.4. An attacker with local access can trigger a denial of service (stack consumption and daemon crash) via crafted BGP mask expressions in birdc. Multiple connected sources confirm the fix is in Bird 1.6.4; Fedora advisories and ...