Buffer overflow in Freebsd

CVE-2014-3954

Stack-based buffer overflow in rtsold in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted DNS parameters in a router advertisement message.

Vulnerability class: Buffer Overflow

EPSS: 0.039 (89.3th percentile) — read the EPSS interpretation.

Affected products

  • Freebsd — versions 9.1, 9.2, 9.3
  • N/a — versions n/a

Weakness classification (CWE)

References