6.8
CVSSv2

CVE-2014-3554

Published: 31/07/2014 Updated: 12/10/2021
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Buffer overflow in the ndp_msg_opt_dnssl_domain function in libndp allows remote routers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS Search List (DNSSL) in an IPv6 router advertisement.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

libndp libndp

Vendor Advisories

Debian Bug report logs - #756389 libndp: CVE-2014-3554: buffer overflow Package: src:libndp; Maintainer for src:libndp is Andrew Ayer <agwa@andrewayername>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 29 Jul 2014 12:27:01 UTC Severity: grave Tags: patch, security, upstream Found in version libn ...