VIR Vulnerability Intelligence Relay

CVE-2014-3954

critical
Published 2014-10-27 · Modified 2026-05-06
CVSS v3
—
CVSS v2
10.0
VIR risk
10.0

Description

Stack-based buffer overflow in rtsold in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted DNS parameters in a router advertisement message.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cve@mitre.org — https://www.freebsd.org/security/advisories/FreeBSD-SA-14%3A20.rtsold.asc

OS impact
OSVersionStatusFixed in
freebsd freebsd9.1affected
freebsd freebsd9.2affected
freebsd freebsd9.3affected
freebsd freebsd10.0affected
freebsd freebsd10.1affected

References

CWEs

CWE-119

Verify integrity in audit chain (admin only). AS-IS.