Lucene search
HistoryOct 27, 2014 - 3:55 p.m.
CVE-2014-3954
cve-2014-3954
stack-based buffer overflow
rtsold
freebsd
remote attackers
denial of service
execute arbitrary code
crafted dns parameters
router advertisement message
nvd
8.4 High
AI Score
Confidence
High
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.038 Low
EPSS
Percentile
91.8%
Stack-based buffer overflow in rtsold in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted DNS parameters in a router advertisement message.
| CPE | Name | Operator | Version |
|---|---|---|---|
| freebsd:freebsd | freebsd | eq | 10.0 |
| freebsd:freebsd | freebsd | eq | 9.3 |
| freebsd:freebsd | freebsd | eq | 10.1 |
| freebsd:freebsd | freebsd | eq | 9.1 |
| freebsd:freebsd | freebsd | eq | 9.2 |
Related
freebsd
freebsd
FreeBSD -- rtsold(8) remote buffer overflow vulnerability
2014-10-21 00:00:00
prion
prion
Stack overflow
2014-10-27 15:55:00
nessus
nessus
securityvulns
securityvulns
FreeBSD rtsold buffer overflow
2014-10-27 00:00:00
FreeBSD Security Advisory FreeBSD-SA-14:20.rtsold
2014-10-27 00:00:00
cvelist
cvelist
CVE-2014-3954
2014-10-27 15:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:20.rtsold
2014-10-21 00:00:00
8.4 High
AI Score
Confidence
High
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.038 Low
EPSS
Percentile
91.8%
Related for CVE-2014-3954