Debian Dhcpcd vulnerabilities

CVE-2016-1503 [CRITICAL] CVE-2016-1503: dhcpcd - dhcpcd before 6.10.0, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5... dhcpcd before 6.10.0, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 and other products, mismanages option lengths, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a malformed DHCP response, aka internal bug 26461634. Scope: local forky: res

CVE-2012-2152 [HIGH] CVE-2012-2152: dhcpcd - Stack-based buffer overflow in the get_packet method in socket.c in dhcpcd 3.2.3... Stack-based buffer overflow in the get_packet method in socket.c in dhcpcd 3.2.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long packet. Scope: local forky: resolved (fixed in 1:3.2.3-11) sid: resolved (fixed in 1:3.2.3-11) trixie: resolved (fixed in 1:3.2.3-11)

CVE-2012-6698 [HIGH] CVE-2012-6698: dhcpcd - The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to... The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds write) via a crafted response. Scope: local forky: resolved (fixed in 1:10.0.1-1) sid: resolved (fixed in 1:10.0.1-1) trixie: resolved (fixed in 1:10.0.1-1)

CVE-2016-1504 [HIGH] CVE-2016-1504: dhcpcd - dhcpcd before 6.10.0 allows remote attackers to cause a denial of service (inval... dhcpcd before 6.10.0 allows remote attackers to cause a denial of service (invalid read and crash) via vectors related to the option length. Scope: local forky: resolved sid: resolved trixie: resolved

CVE-2012-6700 [HIGH] CVE-2012-6700: dhcpcd - The decode_search function in dhcp.c in dhcpcd 3.x does not properly free alloca... The decode_search function in dhcp.c in dhcpcd 3.x does not properly free allocated memory, which allows remote DHCP servers to cause a denial of service via a crafted response. Scope: local forky: resolved (fixed in 1:10.0.1-1) sid: resolved (fixed in 1:10.0.1-1) trixie: resolved (fixed in 1:10.0.1-1)

CVE-2012-6699 [HIGH] CVE-2012-6699: dhcpcd - The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to... The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds read) via a crafted response. Scope: local forky: resolved (fixed in 1:10.0.1-1) sid: resolved (fixed in 1:10.0.1-1) trixie: resolved (fixed in 1:10.0.1-1)

CVE-2002-1403 [HIGH] CVE-2002-1403: dhcpcd - dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbit... dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script. Scope: local forky: resolved (fixed in 1:1.3.22pl2-2) sid: resolved (fixed in 1:1.3.22pl2-2) trixie: resolved (fixed in 1:1.3.22pl2-2)

CVE-2005-1848 [MEDIUM] CVE-2005-1848: dhcpcd - The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial o... The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors that cause an out-of-bounds memory read. Scope: local forky: resolved (fixed in 1:1.3.22pl4-22) sid: resolved (fixed in 1:1.3.22pl4-22) trixie: resolved (fixed in 1:1.3.22pl4-22)

CVE-2014-6060 [LOW] CVE-2014-6060: dhcpcd - The get_option function in dhcpcd 4.0.0 through 6.x before 6.4.3 allows remote D... The get_option function in dhcpcd 4.0.0 through 6.x before 6.4.3 allows remote DHCP servers to cause a denial of service by resetting the DHO_OPTIONSOVERLOADED option in the (1) bootfile or (2) servername section, which triggers the option to be processed again. Scope: local forky: resolved sid: resolved trixie: resolved