Unscored severity · published Feb 17, 2014
CVE-2011-3605
The process_rs function in the router advertisement daemon (radvd) before 1.8.2, when UnicastOnly is enabled, allows remote attackers to cause a denial of service (temporary…
–
CVSS
1.6%
EPSS
No
On KEV
Description
The process_rs function in the router advertisement daemon (radvd) before 1.8.2, when UnicastOnly is enabled, allows remote attackers to cause a denial of service (temporary service hang) via a large number of ND_ROUTER_SOLICIT requests.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
Router Advertisement Daemon · Litech
through 1.8.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3605
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3605
www.debian.org
http://www.debian.org/security/2011/dsa-2323
www.litech.org
http://www.litech.org/radvd/CHANGES
www.openwall.com
http://www.openwall.com/lists/oss-security/2011/10/06/3
www.ubuntu.com
http://www.ubuntu.com/usn/USN-1257-1
More from Router Advertisement Daemon
–
CVE-2014-8153
The L3 agent in OpenStack Neutron 2014.2.x before 2014.2.2, when using radvd 2.0+, allows remote authenticated users to cause a denial of service (blocked router update…
–
CVE-2011-3603
The router advertisement daemon (radvd) before 1.8.2 does not properly handle errors in the privsep_init function, which causes the radvd daemon to run as root and has an…
–
CVE-2011-3602
Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite arbitrary files, and remote attackers…
–
CVE-2011-3604
The process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to cause a denial of service (stack-based buffer over-read and crash) via…
–
CVE-2011-3601
Buffer overflow in the process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to execute arbitrary code or cause a denial of service…