CVE-2014-3554: Buffer overflow in the ndp_msg_opt_dnssl_domain function in libndp allows remote routers to cause a denial...

Security readout for executives and security teams

CVE-2014-3554 is a libndp buffer overflow triggered by a crafted DNS Search List in an IPv6 router advertisement. A malicious or compromised router could crash affected software, and the CVE description says arbitrary code execution may be possible. The bundle does not provide affected versions, CVSS, or a named patch. Exposure is most likely on IPv6-enabled systems that run or link against libndp and accept router advertisements containing DNSSL options. The bundle does not identify specific distributions, products, or versions, so asset confirmation requires local package and vendor advisory checks. Treat this as a targeted network-exposure risk rather than an internet-wide emergency. Prioritize IPv6-enabled environments, shared LANs, data centers, and unmanaged network segments where rogue router advertisements are plausible. Mitigation focus: Check OS and vendor advisories for libndp fixes for CVE-2014-3554.; Update libndp packages where vendor-fixed versions are available.; Inventory systems using libndp on IPv6-enabled networks..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.