CVE-2019-11766

< 6.11.7

dhcp6.c in dhcpcd before 6.11.7 and 7.x before 7.2.2 has a buffer over-read in the D6_OPTION_PD_EXCLUDE feature.

9.8CRITICAL

CVE-2019-11579

< 7.2.1

dhcp.c in dhcpcd before 7.2.1 contains a 1-byte read overflow with DHO_OPTSOVERLOADED.

5.3MEDIUM

CVE-2019-11578

< 7.2.1

auth.c in dhcpcd before 7.2.1 allowed attackers to infer secrets by performing latency attacks.

5.9MEDIUM

CVE-2019-11577

< 7.2.1

dhcpcd before 7.2.1 contains a buffer overflow in dhcp6_findna in dhcp6.c when reading NA/TA addresses.

9.8CRITICAL

CVE-2016-1504

<= 6.9.4

dhcpcd before 6.10.0 allows remote attackers to cause a denial of service (invalid read and crash) via vectors related to the opti

7.5HIGH

CVE-2016-1503

<= 6.9.4

dhcpcd before 6.10.0, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 and o

9.8CRITICAL

CVE-2012-6700

all versions

The decode_search function in dhcp.c in dhcpcd 3.x does not properly free allocated memory, which allows remote DHCP servers to ca

7.5HIGH

CVE-2012-6699

all versions

The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds read) vi

7.5HIGH

CVE-2012-6698

all versions

The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds write) v

7.5HIGH

CVE-2014-7913

<= 6.9.0

The print_option function in dhcp-common.c in dhcpcd through 6.9.1, as used in dhcp.c in dhcpcd 5.x in Android before 5.1 and othe

CVE-2014-7912

<= 6.1.0

The get_option function in dhcp.c in dhcpcd before 6.2.0, as used in dhcpcd 5.x in Android before 5.1 and other products, does not

CVE-2014-6060

all versions

The get_option function in dhcpcd 4.0.0 through 6.x before 6.4.3 allows remote DHCP servers to cause a denial of service by resett

CVE-2012-2152

all versions

Stack-based buffer overflow in the get_packet method in socket.c in dhcpcd 3.2.3 allows remote attackers to cause a denial of serv

CVE-2011-0996

<= 5.2.10

dhcpcd before 5.2.12 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a

CVE-2005-1848

all versions

The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors that

CVE-2002-1403

all versions

dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed fr