CVE-2014-3954

Related Files

FreeBSD Security Advisory - rtsold(8) Remote Buffer Overflow

Posted Oct 22, 2014

Authored by Florian Obser, Hiroki Sato | Site security.freebsd.org

FreeBSD Security Advisory - Due to a missing length check in the code that handles DNS parameters, a malformed router advertisement message can result in a stack buffer overflow in rtsold(8). Receipt of a router advertisement message with a malformed DNSSL option, for instance from a compromised host on the same network, can cause rtsold(8) to crash. While it is theoretically possible to inject code into rtsold(8) through malformed router advertisement messages, it is normally compiled with stack protection enabled, rendering such an attack extremely difficult. When rtsold(8) crashes, the existing DNS configuration will remain in force, and the kernel will continue to receive and process periodic router advertisements.

tags | advisory, overflow, kernel

systems | freebsd

advisories | CVE-2014-3954

SHA-256 | e1f62a6f25f130e67a8c1e26993a5607009075d124b8af637931966a65521b56

Download | Favorite | View