CVE-2011-3604
The process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote...
CVE-2011-3604 is a high vulnerability (CVSS 7.5) in Litech Router Advertisement Daemon, published October 26, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.55%, the 75th percentile. Fixed in radvd 1:1.8-1.1.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 1.55%EPSS, 75th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1:1.8-1.1radvd +4 more
Description
The process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to cause a denial of service (stack-based buffer over-read and crash) via unspecified vectors.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
radvdDebian:12 | before 1:1.8-1.1 | 1:1.8-1.1 |
radvdDebian:13 | before 1:1.8-1.1 | 1:1.8-1.1 |
radvdDebian:14 | before 1:1.8-1.1 | 1:1.8-1.1 |
radvdDebian:6.0 From an advisory covering 4 CVEs | before 1:1.6-1.1, plus listed versions 1:1.6-1 | 1:1.6-1.1 |
radvdDebian:5.0 From an advisory covering 4 CVEs | before 1:1.1-3.1, plus listed versions 1:1.1-3 | 1:1.1-3.1 |
What each source reports
NVD Score used
The process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to cause a denial of service (stack-based buffer over-read and crash) via unspecified vectors.
- Record
CVE-2011-3604- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
The process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to cause a denial of service (stack-based buffer over-read and crash) via unspecified vectors.
- Record
CVE-2011-3604- Updated
- 2026-11-02
EUVDEUVD-2011-3563No score
The process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to cause a denial of service (stack-based buffer over-read and crash) via unspecified vectors.
- Record
EUVD-2011-3563- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cqww-f3q2-p7g2No score
The process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote...
The process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to cause a denial of service (stack-based buffer over-read and crash) via unspecified vectors.
- Record
GHSA-cqww-f3q2-p7g2- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVNo score
The process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to cause a denial of service (stack-based buffer over-read and crash) via unspecified vectors.
- Record
CVE-2011-3604- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-3604No score
The process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to cause a denial of service (stack-based buffer over-read and crash) via unspecified vectors.
- Record
DEBIAN-CVE-2011-3604- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.