CVE-2011-3601

CVE-2011-3601 describes a buffer overflow vulnerability in the router advertisement daemon (radvd) before version 1.8.2, specifically within the process_ra function. This flaw allows remote attackers to execute arbitrary code or trigger a denial of service by providing a negative value in a label_len field. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. Despite its severity, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.