critical9.8Known exploited
CVE-2014-3931
Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2025-07-07. Federal due date: 2025-07-28.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Impact
fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Multi-Router Looking Glass Project | Multi-Router Looking Glass | through 5.4.1 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://mrlg.op-sec.us/
- http://www.s3.eurecom.fr/cve/CVE-2014-3931.txt
- https://hackerone.com/reports/16330
- http://mrlg.op-sec.us/
- http://www.s3.eurecom.fr/cve/CVE-2014-3931.txt
- https://hackerone.com/reports/16330
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-3931