Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability

CRITICAL 9.8EXPLOITED (CISA KEV)CVE-2014-3931 · Published 31/03/2017 · updated 17/06/2026

Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 07/07/2025. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
multi-router looking glass multi-router_looking_glass_project	`≤ 5.4.1`	No fix yet

Description

fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption.

References

mrlg.op-sec.us · Third Party Advisory
s3.eurecom.fr/cve/CVE-2014-3931.txt · Third Party Advisory
hackerone.com/reports/16330 · Exploit
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2014-3931

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free