CVE-2014-3931

Multi-Router Looking Glass (MRLG), a web-based tool used by network operators to run public router/BGP looking-glass services, contains a buffer overflow flaw (CWE-119) that can be triggered by remote attackers via crafted input to the network-facing service. The flaw allows arbitrary memory writes and memory corruption, potentially leading to code execution or denial of service under the privileges of the MRLG service. Organizations running reachable MRLG instances — typically ISPs, exchange points, and enterprise network teams exposing looking-glass pages — are affected. CISA added this CVE to the Known Exploited Vulnerabilities catalog on 2025-07-07, indicating confirmed in-the-wild exploitation, though no public proof-of-concept is known. EPSS currently estimates a 29% probability of exploitation within 30 days, placing it in the 98th percentile.

What to do: Per the CISA KEV required action, apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable, and follow BOD 22-01 guidance for cloud services; no fixed version is specified in the available data, so check with the maintainer for the latest release. Inventory internet-facing looking-glass pages for MRLG and, where patching is not possible, restrict public access to the service or remove it from exposure.