Lucene search

K
freebsdFreeBSD72EE7111-6007-11E6-A6C3-14DAE9D210B8
HistoryOct 21, 2014 - 12:00 a.m.

FreeBSD -- rtsold(8) remote buffer overflow vulnerability

2014-10-2100:00:00
vuxml.freebsd.org
8

0.038 Low

EPSS

Percentile

91.8%

Problem Description:
Due to a missing length check in the code that handles
DNS parameters, a malformed router advertisement message
can result in a stack buffer overflow in rtsold(8).
Impact:
Receipt of a router advertisement message with a malformed
DNSSL option, for instance from a compromised host on the
same network, can cause rtsold(8) to crash.
While it is theoretically possible to inject code into
rtsold(8) through malformed router advertisement messages,
it is normally compiled with stack protection enabled,
rendering such an attack extremely difficult.
When rtsold(8) crashes, the existing DNS configuration
will remain in force, and the kernel will continue to receive
and process periodic router advertisements.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfreebsd= 10.0UNKNOWN
FreeBSDanynoarchfreebsd< 10.0_10UNKNOWN

0.038 Low

EPSS

Percentile

91.8%

Related for 72EE7111-6007-11E6-A6C3-14DAE9D210B8