Roland Kovacs 00840d6570 radvd: fix CVE-2026-48715 ...

Prior to version 2.21, the `radvdump` utility shipped with radvd
contains a stack buffer overflow in the Route Information option
parser.

When processing a crafted ICMPv6 Router Advertisement, `print_ff()`
copies up to 2032 bytes from attacker-controlled packet data into a
16-byte `struct in6_addr` on the stack, overflowing by up to 2016
bytes.

Signed-off-by: Roland Kovacs <roland.kovacs@est.tech>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>

2026-07-16 15:49:41 +05:30

..

files

radvd: fix CVE-2026-48715

2026-07-16 15:49:41 +05:30

radvd_2.19.bb

radvd: fix CVE-2026-48715

2026-07-16 15:49:41 +05:30