PT-2017-5894 · Mrlg · Mrlg

CVE-2014-3931 · Publicado 2017-03-31 · Atualizado 2025-07-13

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: MRLG versions prior to 5.5.0

Description: The issue allows remote attackers to cause an arbitrary memory write and memory corruption in the fastping.c component of MRLG.

Recommendations: For versions prior to 5.5.0, update to version 5.5.0 or later to resolve the issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2026-00096

CVE-2014-3931

Produtos afetados

Mrlg

Referências · 14

• 🔥 https://hackerone.com/reports/16330 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-3931 · Nota de Segurança
• https://bdu.fstec.ru/vul/2026-00096 · Nota de Segurança
• https://t.me/cvenotify/127927 · Publicação no Telegram
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Nota
• https://mrlg.op-sec.us · Nota de Segurança
• https://t.me/echeloneyes/3956 · Publicação no Telegram
• http://mrlg.op-sec.us · Nota
• https://reddit.com/r/pwnhub/comments/1luo5sh/cisa_flags_four_critical_vulnerabilities_amid · Publicação no Reddit
• https://microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Exploit:O97M/CVE-2014-3931.KRA!MTB&ThreatID=2147814370 · Aviso do Fabricante
• https://twitter.com/cyber_sec_raj/status/1944252652465840531 · Publicação no Twitter
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-3931 · Nota
• http://s3.eurecom.fr/cve/CVE-2014-3931.txt · Nota
• https://t.me/cvenotify/127887 · Publicação no Telegram