Lucene search
HistoryOct 27, 2014 - 3:55 p.m.
CVE-2014-3954
cve-2014-3954
stack-based buffer overflow
rtsold
freebsd
remote attackers
denial of service
execute arbitrary code
crafted dns parameters
router advertisement message
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.4 High
AI Score
Confidence
High
0.038 Low
EPSS
Percentile
91.9%
Stack-based buffer overflow in rtsold in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted DNS parameters in a router advertisement message.
Affected configurations
Node
freebsdfreebsdMatch9.1
ORfreebsdfreebsdMatch9.1p4
ORfreebsdfreebsdMatch9.1p5
ORfreebsdfreebsdMatch9.2-
ORfreebsdfreebsdMatch9.2prerelease
ORfreebsdfreebsdMatch9.2rc1
ORfreebsdfreebsdMatch9.2rc2
ORfreebsdfreebsdMatch9.3
ORfreebsdfreebsdMatch9.3rc1
ORfreebsdfreebsdMatch9.3rc2
ORfreebsdfreebsdMatch10.0
ORfreebsdfreebsdMatch10.0rc1
ORfreebsdfreebsdMatch10.0rc2
ORfreebsdfreebsdMatch10.1
ORfreebsdfreebsdMatch10.1rc1
ORfreebsdfreebsdMatch10.1rc2
| CPE | Name | Operator | Version |
|---|---|---|---|
| freebsd:freebsd | freebsd | eq | 9.1 |
| freebsd:freebsd | freebsd | eq | 9.2 |
| freebsd:freebsd | freebsd | eq | 9.3 |
| freebsd:freebsd | freebsd | eq | 10.0 |
| freebsd:freebsd | freebsd | eq | 10.1 |
Related
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:20.rtsold
2014-10-21 00:00:00
freebsd
freebsd
FreeBSD -- rtsold(8) remote buffer overflow vulnerability
2014-10-21 00:00:00
nvd
nvd
CVE-2014-3954
2014-10-27 15:55:24
nessus
nessus
securityvulns
securityvulns
FreeBSD rtsold buffer overflow
2014-10-27 00:00:00
FreeBSD Security Advisory FreeBSD-SA-14:20.rtsold
2014-10-27 00:00:00
prion
prion
Stack overflow
2014-10-27 15:55:00
cvelist
cvelist
CVE-2014-3954
2014-10-27 15:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.4 High
AI Score
Confidence
High
0.038 Low
EPSS
Percentile
91.9%
Related for CVE-2014-3954