GoogleOSV:CVE-2019-11579

HistoryApr 28, 2019 - 4:29 p.m.

CVE-2019-11579

2019-04-2816:29:00

Google

osv.dev

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.1%

JSON

dhcp.c in dhcpcd before 7.2.1 contains a 1-byte read overflow with DHO_OPTSOVERLOADED.

CPENameOperatorVersion
dhcpcdeq6.4.4
dhcpcdeq5.0.2
dhcpcdeq6.4.2
dhcpcdeq5.99.7
dhcpcdeq6.7.0
dhcpcdeq6.9.4
dhcpcdeq6.3.1
dhcpcdeq6.7.1
dhcpcdeq7.0.5
dhcpcdeq7.0.0-beta3

Name	Operator	Version
dhcpcd	eq	6.4.4
dhcpcd	eq	5.0.2
dhcpcd	eq	6.4.2
dhcpcd	eq	5.99.7
dhcpcd	eq	6.7.0
dhcpcd	eq	6.9.4
dhcpcd	eq	6.3.1
dhcpcd	eq	6.7.1
dhcpcd	eq	7.0.5
dhcpcd	eq	7.0.0-beta3

Rows per page:

1-10 of 1081

References

www.securityfocus.com/bid/108090

lists.debian.org/debian-lts-announce/2019/05/msg00024.html

roy.marples.name/archives/dhcpcd-discuss/0002415.html

roy.marples.name/git/dhcpcd.git/commit/?id=4b67f6f1038fd4ad5ca7734eaaeba1b2ec4816b8