CVE-2014-3554

Buffer overflow in the ndp_msg_opt_dnssl_domain function in libndp allows remote routers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS Search List (DNSSL) in an IPv6 router advertisement.

• CWE-120

• http://www.openwall.com/lists/oss-security/2014/07/29/2Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/68945Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1118583Issue Tracking, Patch, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94927Third Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2014/07/29/2Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/68945Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1118583Issue Tracking, Patch, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94927Third Party Advisory, VDB Entry

Published

Jul 31, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-3548Multiple cross-site scripting (XSS) vulnerabilities in Moodl…
• CVE-2014-3549Cross-site scripting (XSS) vulnerability in the get_descript…
• CVE-2014-3550Multiple cross-site scripting (XSS) vulnerabilities in admin…
• CVE-2014-3551Multiple cross-site scripting (XSS) vulnerabilities in the a…
• CVE-2014-3552The Shibboleth authentication plugin in auth/shibboleth/inde…
• CVE-2014-3553mod/forum/classes/post_form.php in Moodle through 2.3.11, 2.…
• CVE-2014-3555OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, a…
• CVE-2014-3556The STARTTLS implementation in mail/ngx_mail_smtp_handler.c …
• CVE-2014-3557Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-3558ReflectionHelper (org.hibernate.validator.util.ReflectionHel…
• CVE-2014-3559The oVirt storage backend in Red Hat Enterprise Virtualizati…
• CVE-2014-3560NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.…