CVE-2018-12066: Bird Project Bird

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service (stack consumption and daemon crash) via BGP mask expressions in birdc.

Affected products

• Bird Project Bird: before 1.6.4 (fixed in 1.6.4)

Published 2018-06-08. Last modified 2026-06-17.