CVE-2011-3604

Description

The process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to cause a denial of service (stack-based buffer over-read and crash) via unspecified vectors.

How to fix CVE-2011-3604

To remediate CVE-2011-3604, upgrade the affected package to a fixed version below.

• Debian/radvd—upgrade to 1:1.8-1.1 or later

Is CVE-2011-3604 being exploited?

Low — EPSS is 1.6%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 1:1.8-1.1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2011-3604