E14-61u02
CVSS:
10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)
False Positive:
t
Variants:
1
Year:
2014
Description
This strike exploits a vulnerability in FreeBSD rtsold. Specifically, a router advertisement message with a DNSSL option is not properly validated. The domain name labels are copied into a stack-based buffer without validation. If an overly large value is supplied the buffer will overflow in rtsold causing a denial of service conditino to occur.