CVE-2014-7912: The get_option function in dhcp.c in dhcpcd before 6.2.0, as used in dhcpcd 5.x in Android before 5.1 and other products, does not validate the relationship…

PriorityP336medium6.8CVSS 2.0

AVNACMAuNCPIPAP

EPSS

2.65%

83.7th percentile

The get_option function in dhcp.c in dhcpcd before 6.2.0, as used in dhcpcd 5.x in Android before 5.1 and other products, does not validate the relationship between length fields and the amount of data, which allows remote DHCP servers to execute arbitrary code or cause a denial of service (memory corruption) via a large length value of an option in a DHCPACK message.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
debian	dhcpcd5	< dhcpcd5 6.9.1-1 (bookworm)	dhcpcd5 6.9.1-1 (bookworm)
dhcpcd_project	dhcpcd	<= 6.1.0	—

CVSS provenance

nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

osv6.8MEDIUM

vendor_debian6.8MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.