PatchTheCVEbip vulnerabilities and fixes
Recent CVEs affecting bip, with upgrade or downgrade steps. 4 tracked.
bip has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2013-12-24. Highest priority: CVE-2012-0806 (score 45/100).
- CVE-2013-4550 MEDIUM 5.1 MITIGATE UPGRADE Bip before 0.8.9, when running as a daemon, writes SSL handshake errors to an unexpected file descriptor that
- CVE-2012-0806 MEDIUM 6.5 UPGRADE Buffer overflow in Bip 0.8.8 and earlier might allow remote authenticated users to execute arbitrary code via
- CVE-2011-5268 MEDIUM 4.3 UPGRADE MITIGATE connection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers to cause a den
- CVE-2010-3071 MEDIUM 5.0 UPGRADE bip before 0.8.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon cra
FAQ
How do I fix bip vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bip being exploited right now?
None of the tracked bip CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bip CVE should I patch first?
CVE-2012-0806 currently ranks highest (45/100): Buffer overflow in Bip 0.8.8 and earlier might allow remote authenticated users to execute arbitrary code via .