Bird

This hub aggregates every CVE we track for Bird, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 5 most recently published vulnerabilities affecting Bird.

• CVE-2026-49943CZ.NIC BIRD Internet Routing Daemon through 2.19.0 contains a stack-based buffer overflow in the BGP AS_PATH mask matching implementation in nest/a-path.c. The as_path_match() function uses a fixed...6.3Jun 2, 2026
• CVE-2021-26928BIRD through 2.0.7 does not provide functionality for password authentication of BGP peers. Because of this, products that use BIRD (which may, for example, include Tigera products in some configur...6.8Jun 4, 2021
• BDU:2020-04280Уязвимость демона маршрутизации bird, связанная с недостаточной проверкой размера пакетов протокола OSPFv2, позволяющая нарушителю вызвать отказ в обслуживании7.5Sep 18, 2020
• CVE-2019-16159BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer overflow. The BGP daemon's support for RFC 8203 administrative shutdown communication messages includ...7.5Sep 9, 2019
• CVE-2018-12066BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service (stack consumption and daemon crash) via BGP mask expressions in birdc.5.5Jun 8, 2018