Dhcpcd Project: >> Dhcpcd >> 6.3.1 Security Vulnerabilities
The print_option function in dhcp-common.c in dhcpcd through 6.9.1, as used in dhcp.c in dhcpcd 5.x in Android before 5.1 and other products, misinterprets the return value of the snprintf function, which allows remote DHCP servers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted message.
CVSS Score
6.8
EPSS Score
0.018
Published
2015-07-30
The get_option function in dhcpcd 4.0.0 through 6.x before 6.4.3 allows remote DHCP servers to cause a denial of service by resetting the DHO_OPTIONSOVERLOADED option in the (1) bootfile or (2) servername section, which triggers the option to be processed again.
CVSS Score
3.3
EPSS Score
0.004
Published
2014-09-04
Page 2