PT-2020-3887 · Bird · Bird

Published 2020-06-05 · Updated 2020-06-05

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: bird (affected versions not specified)

Description: The issue is related to insufficient size checking of network packets in the OSPFv2 protocol, which can lead to a buffer overflow when a specially crafted packet is sent, allowing a remote attacker to cause a denial of service.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BDU:2020-04280

Affected Products

Bird

References · 3

• https://bdu.fstec.ru/vul/2020-04280 · Security Note
• https://gitlab.nic.cz/labs/bird/-/commit/82937b465b3a50bdcb00eff0b7aa6acb3fc21772 · Note
• http://git.altlinux.org/tasks/index/c8.1/done/254094/gears/100/git · Note