CVE-2018-12066

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service (stack consumption and daemon crash) via BGP mask expressions in birdc.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://bird.network.czThird Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=900967Issue Tracking, Third Party Advisory
https://gitlab.labs.nic.cz/labs/bird/blob/v1.6.4/NEWS#L11Issue Tracking, Third Party Advisory
https://gitlab.labs.nic.cz/labs/bird/commit/e8bc64e308586b6502090da2775af84cd760ed0dIssue Tracking, Patch, Third Party Advisory
http://bird.network.czThird Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=900967Issue Tracking, Third Party Advisory
https://gitlab.labs.nic.cz/labs/bird/blob/v1.6.4/NEWS#L11Issue Tracking, Third Party Advisory
https://gitlab.labs.nic.cz/labs/bird/commit/e8bc64e308586b6502090da2775af84cd760ed0dIssue Tracking, Patch, Third Party Advisory

Timeline

Published: Jun 8, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-120677.5The sell function of a smart contract implementation for Substratum (SUB), a tradable Ethereum ERC20 token, allows a potential trap that cou CVE-2018-120687.5The sell function of a smart contract implementation for Target Coin (TGT), a tradable Ethereum ERC20 token, allows a potential trap that co CVE-2018-12079.8Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code. A remo CVE-2018-120707.5The sell function of a smart contract implementation for SEC, a tradable Ethereum ERC20 token, allows a potential trap that could be used to CVE-2018-120719.8A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.use_strict_mode in the Session Library was mishandled.CVE-2018-120729.8An issue was discovered in Cloud Media Popcorn A-200 03-05-130708-21-POP-411-000 firmware. It is configured to provide TELNET remote access CVE-2018-120735.3An issue was discovered on Eminent EM4544 9.10 devices. The device does not require the user's current password to set a new one within the CVE-2018-120764.2A vulnerability in the UPC bar code of the Avanti Markets MarketCard could allow an unauthenticated, local attacker to access funds within t CVE-2018-120787.5The mintToken function of a smart contract implementation for PolyAI (AI), a tradable Ethereum ERC20 token, has no period constraint, which CVE-2018-120797.5The mintToken function of a smart contract implementation for Substratum (SUB), a tradable Ethereum ERC20 token, has no period constraint, w CVE-2018-120807.5The mintToken function of a smart contract implementation for Internet Node Token (INT), a tradable Ethereum ERC20 token, has no period cons CVE-2018-120817.5The mintToken function of a smart contract implementation for Target Coin (TGT), a tradable Ethereum ERC20 token, has no period constraint,