Lucene search

K
cveRedhatCVE-2014-3554
HistoryJul 31, 2014 - 2:55 p.m.

CVE-2014-3554

2014-07-3114:55:03
CWE-120
redhat
web.nvd.nist.gov
30
cve-2014-3554
buffer overflow
libndp
remote routers
denial of service
arbitrary code
dns
ipv6
router advertisement

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.014

Percentile

86.2%

Buffer overflow in the ndp_msg_opt_dnssl_domain function in libndp allows remote routers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS Search List (DNSSL) in an IPv6 router advertisement.

Affected configurations

Nvd
Node
libndplibndpRange<1.4
VendorProductVersionCPE
libndplibndp*cpe:2.3:a:libndp:libndp:*:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.014

Percentile

86.2%