CPE Details
dhcpcd Project dhcpcd 6.9.1
6.9.1
2019-06-07
13h39 +00:00
13h39 +00:00
2019-06-07
13h39 +00:00
13h39 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:dhcpcd_project:dhcpcd:6.9.1:*:*:*:*:*:*:*
Informations
Vendor
dhcpcd_projectProduct
dhcpcdVersion
6.9.1Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| dhcp6.c in dhcpcd before 6.11.7 and 7.x before 7.2.2 has a buffer over-read in the D6_OPTION_PD_EXCLUDE feature. | 9.8 |
Critical |
||
| dhcp.c in dhcpcd before 7.2.1 contains a 1-byte read overflow with DHO_OPTSOVERLOADED. | 5.3 |
Medium |
||
| auth.c in dhcpcd before 7.2.1 allowed attackers to infer secrets by performing latency attacks. | 5.9 |
Medium |
||
| dhcpcd before 7.2.1 contains a buffer overflow in dhcp6_findna in dhcp6.c when reading NA/TA addresses. | 9.8 |
Critical |
||
| dhcpcd before 6.10.0 allows remote attackers to cause a denial of service (invalid read and crash) via vectors related to the option length. | 7.5 |
High |
||
| dhcpcd before 6.10.0, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 and other products, mismanages option lengths, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a malformed DHCP response, aka internal bug 26461634. | 9.8 |
Critical |
