dhcpcd project

Top products

The 15 most recently published vulnerabilities affecting dhcpcd project.

• CVE-2026-56117dhcpcd Heap Use-After-Free via Control Socket Handling4.7Jun 23, 2026
• CVE-2026-56116dhcpcd Memory Leak DoS via IPv6 Router Advertisement Handling6.5Jun 23, 2026
• CVE-2026-56114dhcpcd Stack Out-of-Bounds Write in dhcp6_makemessage()5.3Jun 23, 2026
• CVE-2026-56113dhcpcd Heap Use-After-Free in dhcp6_deprecateaddrs via DHCPv6 RENEW5.3Jun 23, 2026
• CVE-2019-11766dhcp6.c in dhcpcd before 6.11.7 and 7.x before 7.2.2 has a buffer over-read in the D6_OPTION_PD_EXCLUDE feature.9.8May 5, 2019
• CVE-2019-11579dhcp.c in dhcpcd before 7.2.1 contains a 1-byte read overflow with DHO_OPTSOVERLOADED.5.3Apr 28, 2019
• CVE-2019-11578auth.c in dhcpcd before 7.2.1 allowed attackers to infer secrets by performing latency attacks.5.9Apr 28, 2019
• CVE-2019-11577dhcpcd before 7.2.1 contains a buffer overflow in dhcp6_findna in dhcp6.c when reading NA/TA addresses.9.8Apr 28, 2019
• CVE-2016-1504dhcpcd before 6.10.0 allows remote attackers to cause a denial of service (invalid read and crash) via vectors related to the option length.7.5Feb 7, 2017
• CVE-2016-1503dhcpcd before 6.10.0, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 and other products, mismanages option lengths, which allows remote attac...9.8Apr 18, 2016
• CVE-2012-6698The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds write) via a crafted response.7.5Apr 11, 2016
• CVE-2012-6700The decode_search function in dhcp.c in dhcpcd 3.x does not properly free allocated memory, which allows remote DHCP servers to cause a denial of service via a crafted response.7.5Apr 11, 2016
• CVE-2012-6699The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds read) via a crafted response.7.5Apr 11, 2016
• CVE-2014-7913The print_option function in dhcp-common.c in dhcpcd through 6.9.1, as used in dhcp.c in dhcpcd 5.x in Android before 5.1 and other products, misinterprets the return value of the snprintf function...6.8Jul 30, 2015
• CVE-2014-7912The get_option function in dhcp.c in dhcpcd before 6.2.0, as used in dhcpcd 5.x in Android before 5.1 and other products, does not validate the relationship between length fields and the amount of ...6.8Jul 30, 2015