PT-2017-5894 · Mrlg · Mrlg

Published 2017-03-31 · Updated 2025-07-13 · CVE-2014-3931

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: MRLG versions prior to 5.5.0

Description: The issue allows remote attackers to cause an arbitrary memory write and memory corruption in the fastping.c component of MRLG.

Recommendations: For versions prior to 5.5.0, update to version 5.5.0 or later to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2026-00096

CVE-2014-3931

Affected Products

Mrlg

References · 14

• 🔥 https://hackerone.com/reports/16330 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-3931 · Security Note
• https://bdu.fstec.ru/vul/2026-00096 · Security Note
• https://mrlg.op-sec.us · Security Note
• https://microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Exploit:O97M/CVE-2014-3931.KRA!MTB&ThreatID=2147814370 · Vendor Advisory
• https://t.me/cvenotify/127927 · Telegram Post
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Note
• https://t.me/echeloneyes/3956 · Telegram Post
• http://mrlg.op-sec.us · Note
• https://reddit.com/r/pwnhub/comments/1luo5sh/cisa_flags_four_critical_vulnerabilities_amid · Reddit Post
• https://twitter.com/cyber_sec_raj/status/1944252652465840531 · Twitter Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-3931 · Note
• http://s3.eurecom.fr/cve/CVE-2014-3931.txt · Note
• https://t.me/cvenotify/127887 · Telegram Post