Re: BIRD/BIRD2: stack buffer overflow in BGP AS_PATH mask matching, CVE pending

[Bakabaka_9 <qilunuobakabaka9 () gmail com>]

Hi Stuart,

Fair point. I should have worded that more precisely.

I personally reproduced the issue on BIRD 2.16.2. I have not independently
tested every later release.

The reason I wrote that no fixed version is currently available is that
upstream told me on 2026-05-24 that they currently do not plan to fix the
issue, and I have been watching the public BIRD Git commit history since
then.
As of the disclosure, I had not seen any commit that looked like a fix for
the
AS_PATH mask matching stack buffer issue.

So the more accurate wording is:

- tested affected: BIRD 2.16.2
- possibly affected: other BIRD 2.x versions with the same AS_PATH mask
  matching implementation
- fixed version: no public fixed version known to me

If there is a fix commit or release that I missed, please point me to it and
I will retest/update accordingly.

Best,
Bakabaka_9

Dan Yefihmov <dan () lightwave net ru> 于 2026年6月2日周二 23:30写道：

> On June 2, 2026 1:56:57 PM GMT+03:00, Stuart Henderson <
> stu () spacehopper org> wrote:
> > On 2026/06/02 10:07, Bakabaka_9 wrote:
> > > Tested affected:
> > >
> > > - BIRD 2.16.2
> > >
> > > Possibly affected:
> > >
> > > - Other BIRD 2.x versions using the same AS_PATH mask matching
> > >   implementation.
> > >
> > > Not affected:
> > >
> > > - Unknown.
> > >
> > > Fixed version
> > > =============
> > >
> > > No fixed version is available at the time of this disclosure.
> >
> > If you've only tried one version from April 2025, how can you can say
> > with certainty that it's not been fixed since then?
> Did you really read the report carefully? It's explicitly written there
> that on May 24 the maintainers clearly written they don't currently plan to
> fix it!
>
>
> Sincerely Yours, Dan.