Cross site scripting

A vulnerability, which was classified as problematic, has been found in sileht bird-lg. This issue affects some unknown processing of the file templates/layout.html. The manipulation of the argument requestargs leads to cross site scripting. The attack may be initiated remotely. The name of the...

CVE-2021-4274 sileht bird-lg layout.html cross site scripting

A vulnerability, which was classified as problematic, has been found in sileht bird-lg. This issue affects some unknown processing of the file templates/layout.html. The manipulation of the argument requestargs leads to cross site scripting. The attack may be initiated remotely. The name of the...

CVE-2021-4274 sileht bird-lg layout.html cross site scripting

A vulnerability, which was classified as problematic, has been found in sileht bird-lg. This issue affects some unknown processing of the file templates/layout.html. The manipulation of the argument requestargs leads to cross site scripting. The attack may be initiated remotely. The name of the...

PT-2022-11672 · Unknown · Sileht Bird-Lg

Name of the Vulnerable Software and Affected Versions: sileht bird-lg affected versions not specified Description: A problematic issue has been found in the processing of the file templates/layout.html, where the manipulation of the request args argument leads to cross-site scripting. The attack...

CVE-2021-4274

The CVE-2021-4274 issue affects sileht bird-lg, specifically processing of templates/layout.html. The root cause is manipulation of the request_args parameter, enabling cross-site scripting, with remote initiation possible. A patch named ef6b32c527478fefe7a4436e10b96ee28ed5b308 is recommended (as...

[SECURITY] Fedora 33 Update: rpki-client-7.5-1.fc33

The OpenBSD rpki-client is a free, easy-to-use implementation of the Resource Public Key Infrastructure RPKI for Relying Parties RP to facilitate validation of the Route Origin of a BGP announcement. The program queries the RPKI repository system, downloads and validates Route Origin Authorisatio...

[SECURITY] Fedora 34 Update: rpki-client-7.5-1.fc34

The OpenBSD rpki-client is a free, easy-to-use implementation of the Resource Public Key Infrastructure RPKI for Relying Parties RP to facilitate validation of the Route Origin of a BGP announcement. The program queries the RPKI repository system, downloads and validates Route Origin Authorisatio...

Fedora: Security Advisory for rpki-client (FEDORA-2021-5b8d0d36bf)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 33 Update: rpki-client-7.4-1.fc33

The OpenBSD rpki-client is a free, easy-to-use implementation of the Resource Public Key Infrastructure RPKI for Relying Parties RP to facilitate validation of the Route Origin of a BGP announcement. The program queries the RPKI repository system, downloads and validates Route Origin Authorisatio...

[SECURITY] Fedora 34 Update: rpki-client-7.4-1.fc34

The OpenBSD rpki-client is a free, easy-to-use implementation of the Resource Public Key Infrastructure RPKI for Relying Parties RP to facilitate validation of the Route Origin of a BGP announcement. The program queries the RPKI repository system, downloads and validates Route Origin Authorisatio...

CVE-2021-26928

BIRD through 2.0.7 does not provide functionality for password authentication of BGP peers. Because of this, products that use BIRD which may, for example, include Tigera products in some configurations, as well as products of other vendors may have been susceptible to route redirection for Denia...

CVE-2021-26928

BIRD through 2.0.7 does not provide functionality for password authentication of BGP peers. Because of this, products that use BIRD which may, for example, include Tigera products in some configurations, as well as products of other vendors may have been susceptible to route redirection for Denia...

Information disclosure

DISPUTED BIRD through 2.0.7 does not provide functionality for password authentication of BGP peers. Because of this, products that use BIRD which may, for example, include Tigera products in some configurations, as well as products of other vendors may have been susceptible to route redirection...

CVE-2021-26928

BIRD through 2.0.7 does not provide functionality for password authentication of BGP peers. Because of this, products that use BIRD which may, for example, include Tigera products in some configurations, as well as products of other vendors may have been susceptible to route redirection for Denia...

CVE-2021-26928

BIRD through 2.0.7 does not provide functionality for password authentication of BGP peers. Because of this, products that use BIRD which may, for example, include Tigera products in some configurations, as well as products of other vendors may have been susceptible to route redirection for Denia...

CVE-2021-26928

CVE-2021-26928 affects BIRD up to version 2.0.7, where password authentication for BGP peers is not implemented. This missing authentication can allow route redirection, with potential Denial of Service and Information Disclosure impacting products that rely on BIRD (e.g., Tigera configurations a...

BIRD 访问控制错误漏洞

BIRD is a full-featured dynamic IP routing daemon. An access control error vulnerability exists in BIRD 2.0.7, which stems from the fact that BIRD does not provide password authentication for BGP peers. The vulnerability could easily result in a denial of service and or information disclosure rou...

PT-2021-17183 · Bird · Bird

Name of the Vulnerable Software and Affected Versions: BIRD versions 2.0.7 and earlier Description: The issue is related to the lack of password authentication functionality for BGP peers in BIRD, which may make products that use BIRD susceptible to route redirection, potentially leading to Denia...

Denial of Service in mcfriend99/bird

✍️ Description The Bird interpreter is vulnerable to memory leaks. This occurs due to memory being allocated but never freed during the compilation/interpretation process. 🕵️‍♂️ Proof of Concept Compile the interpreter with ASAN enabled. Run the interpreter and execute print123 and then exit. You...

Heap-based Buffer Overflow in mcfriend99/bird

✍️ Description Heap-based Write Violation. Certain input programs can result in write access violations by the syntax checker component of the interpreter. One such program writes 23 bytes onto the heap outside of bounds and may result in arbitrary code execution and memory leaks. 🕵️‍♂️ Proof of...