Denial of Service Vulnerability in radvd Package - CVE-2011-3604
Summary
CVE-2011-3604: The process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to cause a denial of service (stack-based buffer over-read and crash) via unspecified vectors. Affects radvd versions < 1:1.8-1.1. Fixed in 1:1.8-1.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The router advertisement daemon (radvd) is a crucial component in IPv6 networking, responsible for sending router advertisements to enable hosts to configure their IPv6 addresses automatically. This package is widely used in various Debian-based systems to facilitate seamless network configuration. However, prior to version 1.8.2, radvd was susceptible to a vulnerability that could lead to a denial of service, affecting its reliability and performance.
Vulnerability Detail
CVE-2011-3604 is a vulnerability found in the process_ra function of the radvd package before version 1.8.2. It allows remote attackers to exploit unspecified vectors to cause a denial of service through a stack-based buffer over-read, leading to a crash of the daemon. This vulnerability poses significant risks as it can disrupt network services and impact the availability of IPv6 connectivity for users.
How To Fix
Minimum fixed version
1:1.8-1.1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade radvdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate upgrading is not feasible, consider temporarily disabling the radvd service to mitigate the risk of exploitation. This can be done using the following command:
sudo systemctl stop radvd
However, this will disable IPv6 router advertisements, which may affect network functionality.
Conclusion
CVE-2011-3604 is a critical vulnerability in the radvd package that can lead to denial of service attacks. Users are strongly advised to upgrade to the latest version to ensure the security and reliability of their IPv6 networking services. For those unable to upgrade immediately, consider disabling the service as a temporary measure.
See every vulnerability recorded for radvd →
FAQ
CVE-2011-3604 is a vulnerability in the radvd package that allows remote attackers to cause a denial of service through a stack-based buffer over-read.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Exploitation of this vulnerability can lead to a denial of service, causing the radvd daemon to crash and disrupting IPv6 network services.
Yes, you can temporarily stop the radvd service to mitigate the risk, but this will disable IPv6 router advertisements.
The recommended action is to upgrade the radvd package to version 1.8.2 or later to eliminate the vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for radvd.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.