Stack overflow

Stack-based buffer overflow in rtsold in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via crafted DNS parameters in a router advertisement message...

CVE-2014-3954

CVE-2014-3954 affects FreeBSD with the rtsold(8) daemon. A missing length check in DNS parameter handling allows a crafted router-advertisement message to trigger a stack buffer overflow in rtsold(8), potentially crashing the daemon or, in theory, allowing code execution. Affected are FreeBSD 9.1...

CVE-2014-3954

Stack-based buffer overflow in rtsold in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via crafted DNS parameters in a router advertisement message...

FreeBSD-SA-14:20.rtsold

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-14:20.rtsold Security Advisory The FreeBSD Project Topic: rtsold8 remote buffer overflow vulnerability Category: core Module: rtsold Announced: 2014-10-21 Credits...

FreeBSD -- rtsold(8) remote buffer overflow vulnerability

Problem Description: Due to a missing length check in the code that handles DNS parameters, a malformed router advertisement message can result in a stack buffer overflow in rtsold8. Impact: Receipt of a router advertisement message with a malformed DNSSL option, for instance from a compromised...