CVE-2014-3554: Buffer Overflow
Buffer overflow in the ndpmsgoptdnssldomain function in libndp allows remote routers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS Search List (DNSSL) in an IPv6 router advertisement.
Other sources
libndp provides a library for the IPv6 Neighbor Discovery Protocol. A buffer overflow flaw was found in the ndpmsgoptdnssldomain() function when handling the DNS Search List (DNSSL) in IPv6 router advertisements. A malicious router or man-in-the-middle attacker could use this flaw to cause an application using libndp to crash or, potentially, execute arbitrary code.
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3554?
CVE-2014-3554 is considered a high severity vulnerability due to its potential to cause a denial of service and execute arbitrary code.
How do I fix CVE-2014-3554?
The resolution for CVE-2014-3554 is to update libndp to version 1.4 or later, which contains the necessary security patches.
What systems are affected by CVE-2014-3554?
CVE-2014-3554 affects libndp versions prior to 1.4, particularly those used in IPv6 router advertisements.
What type of vulnerability is CVE-2014-3554?
CVE-2014-3554 is a buffer overflow vulnerability that can be exploited through crafted DNS Search Lists.
Can CVE-2014-3554 lead to remote code execution?
Yes, CVE-2014-3554 allows remote attackers to potentially execute arbitrary code through specially crafted IPv6 router advertisements.