CVE-2014-3954

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-10-27 · updated 2026-06-17
Weakness: CWE-119

Description

Stack-based buffer overflow in rtsold in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted DNS parameters in a router advertisement message.

Affected products

FreeBSD: 9.1, 9.1-p4, 9.1-p5, 9.2, 9.2-prerelease, 9.2-rc1 (+10)

References

http://www.securitytracker.com/id/1031098
https://www.freebsd.org/security/advisories/FreeBSD-SA-14%3A20.rtsold.asc
http://www.securitytracker.com/id/1031098
https://www.freebsd.org/security/advisories/FreeBSD-SA-14%3A20.rtsold.asc

Get alerted when CVE-2014-3954 or the next vulnerability affects your stack