Stack-based buffer overflow in rtsold in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted DNS parameters in a router advertisement message.
https://www.freebsd.org/security/advisories/FreeBSD-SA-14%3A20.rtsold.asc