PT-2019-4126 · Bird+2 · Bird Internet Routing Daemon+2
Daniel Mccarney
·
Publicado
2019-09-09
·
Atualizado
2025-05-09
·
CVE-2019-16159
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
BIRD Internet Routing Daemon versions 1.6.x through 1.6.7
BIRD Internet Routing Daemon versions 2.x through 2.0.5
Description
The issue is related to a stack-based buffer overflow in the BGP daemon's support for RFC 8203 administrative shutdown communication messages. This occurs due to an incorrect logical expression when checking the validity of an input message. Sending a shutdown communication with a sufficient message length can cause a four-byte overflow, with two of the overflow bytes being attacker-controlled and two being fixed. The vulnerability is associated with unverified copying of buffer data, which can be exploited by a remote attacker to cause a denial of service.
Recommendations
For BIRD Internet Routing Daemon versions 1.6.x through 1.6.7, consider disabling the BGP daemon's support for RFC 8203 administrative shutdown communication messages until a patch is available.
For BIRD Internet Routing Daemon versions 2.x through 2.0.5, restrict access to the BGP daemon to minimize the risk of exploitation.
As a temporary workaround, avoid using the BGP daemon for RFC 8203 administrative shutdown communication messages until the issue is resolved.
Correção
Memory Corruption
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Bird Internet Routing Daemon
Suse