CVE-2011-3605

Published: Feb 17, 2014Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The process_rs function in the router advertisement daemon (radvd) before 1.8.2, when UnicastOnly is enabled, allows remote attackers to cause a denial of service (temporary service hang) via a large number of ND_ROUTER_SOLICIT requests.

Affected (1)

Products: Litech: Router Advertisement Daemon

Litech

1 product

Router Advertisement Daemon

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Litech Router Advertisement Daemon	Up to 1.8.1

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (8)

http://www.debian.org/security/2011/dsa-2323

Source: secalert@redhat.com

http://www.litech.org/radvd/CHANGES

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/10/06/3

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1257-1

Source: secalert@redhat.com

http://www.debian.org/security/2011/dsa-2323

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.litech.org/radvd/CHANGES

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2011/10/06/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1257-1

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.