High severity7.2NVD Advisory· Published Mar 9, 2026· Updated Jun 17, 2026
CVE-2025-14558
CVE-2025-14558
Description
The rtsol(8) and rtsold(8) programs do not validate the domain search list options provided in router advertisement messages; the option body is passed to resolvconf(8) unmodified.
resolvconf(8) is a shell script which does not validate its input. A lack of quoting meant that shell commands pass as input to resolvconf(8) may be executed.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
18cpe:2.3:o:freebsd:freebsd:13.5:-:*:*:*:*:*:*+ 16 more
- cpe:2.3:o:freebsd:freebsd:13.5:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.5:p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.5:p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.5:p3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.5:p4:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.5:p5:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.5:p6:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.5:p7:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:14.3:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:14.3:p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:14.3:p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:14.3:p3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:14.3:p4:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:14.3:p5:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:14.3:p6:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:15.0:-:*:*:*:*:*:*
- (no CPE)range: 15.0-RELEASE
Patches
Vulnerability mechanics
References
2- sploitus.com/exploitnvdExploitThird Party Advisory
- security.freebsd.org/advisories/FreeBSD-SA-25:12.rtsold.ascnvdVendor Advisory
News mentions
0No linked articles in our index yet.