Input Validation Flaw in FreeBSD Router Advertisement Programs
CVE-2025-14558
What is CVE-2025-14558?
An input validation flaw exists in the rtsol(8) and rtsold(8) programs on FreeBSD, which improperly handles domain search list options in router advertisement messages. This flaw allows the unmodified option body to be passed to resolvconf(8), a shell script that does not validate its input sufficiently, potentially leading to arbitrary command execution. This vulnerability underscores the importance of rigorous input validation to safeguard against unintended command execution through user-controlled inputs.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
FreeBSD 15.0-RELEASE
FreeBSD 14.3-RELEASE
FreeBSD 13.5-RELEASE
References
EPSS Score
53% chance of being exploited in the next 30 days.
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved