CVE-2019-16159 Memory corruption in n/a
A stack-based buffer overflow in BIRD allows remote attackers to execute arbitrary code or cause denial of service via crafted BGP shutdown messages.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-16159?
CVE-2019-16159 is a high-severity memory corruption vulnerability in Debian Debian Linux, published on 9 Sep 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer overflow. The BGP daemon's support for RFC 8203 administrative shutdown communication messages included an incorrect logical expression when checking the validity of an input message. Sending a shutdown communication with a sufficient message length causes a four-byte overflow to occur while processing the message, where two of the overflow bytes are attacker-controlled and two are fixed.
Weakness: CWE-787
Which versions are affected by CVE-2019-16159?
It affects 4 products.
Linux distribution packages (3)
bird SUSE:Package Hub 15 SP1 | All versions | 1.6.8-bp151.2.3.1 |
bird openSUSE:Leap 15.1 | All versions | 1.6.8-lp151.2.3.1 |
bird3 openSUSE:Tumbleweed | All versions | 3.1.0-1.1 |
Products include Debian Debian Linux, Fedoraproject Fedora, Nic Bird, Opensuse Backports Sle.
How do I fix CVE-2019-16159?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2019-16159 being exploited?
There is no known exploitation of CVE-2019-16159 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DEBIAN-CVE-2019-16159, GHSA-3fhp-jv43-7m9c, openSUSE-SU-2019:2178-1, openSUSE-SU-2019:2180-1, openSUSE-SU-2024:10652-1, openSUSE-SU-2025:15072-1.