Unscored severity · published Apr 27, 2014
CVE-2011-3603
The router advertisement daemon (radvd) before 1.8.2 does not properly handle errors in the privsep_init function, which causes the radvd daemon to run as root and has an…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The router advertisement daemon (radvd) before 1.8.2 does not properly handle errors in the privsep_init function, which causes the radvd daemon to run as root and has an unspecified impact.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
Router Advertisement Daemon · Litech
through 1.8.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3603
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3603
www.litech.org
http://www.litech.org/radvd/CHANGES
www.openwall.com
http://www.openwall.com/lists/oss-security/2011/10/06/3
access.redhat.com
https://access.redhat.com/security/cve/CVE-2011-3603
More from Router Advertisement Daemon
–
CVE-2014-8153
The L3 agent in OpenStack Neutron 2014.2.x before 2014.2.2, when using radvd 2.0+, allows remote authenticated users to cause a denial of service (blocked router update…
–
CVE-2011-3602
Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite arbitrary files, and remote attackers…
–
CVE-2011-3605
The process_rs function in the router advertisement daemon (radvd) before 1.8.2, when UnicastOnly is enabled, allows remote attackers to cause a denial of service (temporary…
–
CVE-2011-3604
The process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to cause a denial of service (stack-based buffer over-read and crash) via…
–
CVE-2011-3601
Buffer overflow in the process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to execute arbitrary code or cause a denial of service…