CVE-2025-14558

Published: Mar 9, 2026Modified: Jun 17, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

The rtsol(8) and rtsold(8) programs do not validate the domain search list options provided in router advertisement messages; the option body is passed to resolvconf(8) unmodified. resolvconf(8) is a shell script which does not validate its input. A lack of quoting meant that shell commands pass as input to resolvconf(8) may be executed.

Affected (16)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 13.5
Freebsd Freebsd	Version 13.5 p1
Freebsd Freebsd	Version 13.5 p2
Freebsd Freebsd	Version 13.5 p3
Freebsd Freebsd	Version 13.5 p4
Freebsd Freebsd	Version 13.5 p5
Freebsd Freebsd	Version 13.5 p6
Freebsd Freebsd	Version 13.5 p7
Freebsd Freebsd	Version 14.3
Freebsd Freebsd	Version 14.3 p1
Freebsd Freebsd	Version 14.3 p2
Freebsd Freebsd	Version 14.3 p3
Freebsd Freebsd	Version 14.3 p4
Freebsd Freebsd	Version 14.3 p5
Freebsd Freebsd	Version 14.3 p6
Freebsd Freebsd	Version 15.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://security.freebsd.org/advisories/FreeBSD-SA-25:12.rtsold.asc

Source: secteam@freebsd.org

Vendor Advisory

https://sploitus.com/exploit?id=MSF:EXPLOIT-FREEBSD-MISC-RTSOLD_DNSSL_CMDINJECT-

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

ExploitThird Party Advisory

Timeline

No history available yet.