CVE-2016-1504 dhcpcd before 6.10.0 allows remote attackers to cause a denial of service (invalid read and crash) via vectors related to the option length.
HighCVSS 7.5
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
dhcpcd before 6.10.0 allows remote attackers to cause a denial of service (invalid read and crash) via vectors related to the option length.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/dhcpcd5(Debian:12) | < 6.10.1-1 | 6.10.1-1 |
| dhcpcd project dhcpcd | <= 6.9.4 | No fix listed |
References
- Debian Security Tracker CVE-2016-1504 vendor-advisory
- roy.marples.name patch vendor-advisory
- roy.marples.name release-notes vendor-advisory
- [oss-security] 20160107 CVE id request: dhcpcd mailing-list third-party-advisory
- [oss-security] 20160107 Re: CVE id request: dhcpcd mailing-list third-party-advisory
- 1034601 vdb-entry
- GLSA-201606-07 vendor-advisory
- bugs.debian.org issue-tracking