PatchTheCVElitech vulnerabilities
Recent CVEs affecting litech products. 6 tracked.
litech has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2015-01-15. Highest priority: CVE-2011-3602 (score 49/100).
- CVE-2014-8153 MEDIUM 4.0 DOWNGRADE DOWNGRADE The L3 agent in OpenStack Neutron 2014.2.x before 2014.2.2, when using radvd 2.0+, allows remote authenticated
- CVE-2011-3605 MEDIUM 5.0 UPGRADE The process_rs function in the router advertisement daemon (radvd) before 1.8.2, when UnicastOnly is enabled,
- CVE-2011-3604 HIGH 7.5 UPGRADE The process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to cau
- CVE-2011-3603 MEDIUM 4.4 UPGRADE The router advertisement daemon (radvd) before 1.8.2 does not properly handle errors in the privsep_init funct
- CVE-2011-3602 MEDIUM 6.4 UPGRADE Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 al
- CVE-2011-3601 HIGH 7.5 UPGRADE Buffer overflow in the process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remo
FAQ
How do I fix litech vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is litech being exploited right now?
None of the tracked litech CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which litech CVE should I patch first?
CVE-2011-3602 currently ranks highest (49/100): Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 al.