router advertisement daemon vulnerabilities and fixes

Recent CVEs affecting router advertisement daemon, with upgrade or downgrade steps. 6 tracked.

Also searched as: routeradvertisementdaemon.

router advertisement daemon has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2015-01-15. Highest priority: CVE-2011-3602 (score 49/100).

CVE-2014-8153 MEDIUM 4.0 DOWNGRADE DOWNGRADE The L3 agent in OpenStack Neutron 2014.2.x before 2014.2.2, when using radvd 2.0+, allows remote authenticated
CVE-2011-3605 MEDIUM 5.0 UPGRADE The process_rs function in the router advertisement daemon (radvd) before 1.8.2, when UnicastOnly is enabled,
CVE-2011-3604 HIGH 7.5 UPGRADE The process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to cau
CVE-2011-3603 MEDIUM 4.4 UPGRADE The router advertisement daemon (radvd) before 1.8.2 does not properly handle errors in the privsep_init funct
CVE-2011-3602 MEDIUM 6.4 UPGRADE Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 al
CVE-2011-3601 HIGH 7.5 UPGRADE Buffer overflow in the process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remo

FAQ

How do I fix router advertisement daemon vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is router advertisement daemon being exploited right now?

None of the tracked router advertisement daemon CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which router advertisement daemon CVE should I patch first?

CVE-2011-3602 currently ranks highest (49/100): Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 al.

RSS feed for router advertisement daemon · ← Back to latest CVEs