CVE-2011-3605

EPSS 0.51%
Veröffentlicht 17.02.2014 16:55:07
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

The process_rs function in the router advertisement daemon (radvd) before 1.8.2, when UnicastOnly is enabled, allows remote attackers to cause a denial of service (temporary service hang) via a large number of ND_ROUTER_SOLICIT requests.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Litech ≫ Router Advertisement Daemon Version <= 1.8.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.51%	0.637

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.litech.org/radvd/CHANGES

http://www.openwall.com/lists/oss-security/2011/10/06/3

http://www.ubuntu.com/usn/USN-1257-1

http://www.debian.org/security/2011/dsa-2323

https://nvd.nist.gov/vuln/detail/CVE-2011-3605

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-3605

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-3605

EUVD