538 matches found
CVE-2020-7461
CVE-2020-7461 PoC for DHCP vulnerability NAME:WRECK in FreeBSD For educational purposes only Environment Host: macOS 11.2.1 Vagrant: 2.2.15 Victim: FreeBSD 12.1-STABLE r364849 Attacker: Ubuntu 20.04 Disclaimer This PoC will cause DoS instead of RCE to prevent abuse. PoC Turn off DHCP server in...
CVE-2026-102057
A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a denial of service via a DHCP client response. The issue affects DHCP client operation and can interrupt related DHCP, relay, and...
CVE-2026-102057 Junos OS: An attacker causes DHCP service disruption during DHCP client operation
A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a denial of service via a DHCP client response. The issue affects DHCP client operation and can interrupt related DHCP, relay, and...
EUVD-2026-101382
A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a denial of service via a DHCP client response. The issue affects DHCP client operation and can interrupt related DHCP, relay, and...
CVE-2026-102057
A Stack-based Buffer Overflow vulnerability exists in the jdhcpd process of Juniper Networks Junos OS . An unauthenticated adjacent attacker can trigger a denial of service (DoS) by sending a malicious DHCP client response. This vulnerability impacts DHCP client operations and can disrupt associa...
CVE-2026-70250
A Use after free vulnerability in the Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). While the specific root cause is linked to concurrent execution using sh...
CVE-2026-83677
A memory leak vulnerability (CWE-401) exists in the Windows DHCP Client due to a missing release of memory after its effective lifetime. This flaw allows an unauthorized attacker to conduct a denial of service (DoS) attack over a network. The CVSS v3.1 score is 7.5 (High) , indicating low attack ...
CVE-2026-88833
A flaw in the BusyBox udhcpc DHCP client allows an attacker on the same network segment to cause a denial of service and loss of network connectivity. The vulnerability occurs because the client replaces a validated packet length with an attacker-controlled value from the IP header without re-val...
CVE-2026-88833
A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...
Rocky Linux 8.8 [CIQ] Security Update: dhcp-client / dhcp-client-debuginfo / dhcp-common / dhcp-devel / etc Multiple Vulnerabilities (ciqsa-2026_0300)
The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260300 advisory. This advisory aggregates security fixes for the dhcp SRPM in CIQ LTS 8.8. It addresses 3 CVEs: CVE-2023-50868, CVE-2023-4408, CVE-2023-50387. Tenable has...
Rocky Linux 8.6 [CIQ] Security Update: dhcp-client / dhcp-client-debuginfo / dhcp-common / dhcp-devel / etc Multiple Vulnerabilities (ciqsa-2026_0032)
The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260032 advisory. This advisory aggregates security fixes for the dhcp SRPM in CIQ LTS 8.6. It addresses 25 CVEs: CVE-2018-5732, CVE-2011-0413, CVE-2022-2929, CVE-2018-111...
Rocky Linux 8.6 [CIQ] Security Update: dhcp-client / dhcp-client-debuginfo / dhcp-common / dhcp-devel / etc Multiple Vulnerabilities (ciqsa-2026_0820)
The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260820 advisory. This advisory aggregates security fixes for the dhcp SRPM in CIQ LTS 8.6. It addresses 3 CVEs: CVE-2022-3094, CVE-2021-25220, CVE-2022-2795. Tenable has...
CVE-2026-102720
A DHCP server, or anyone on the LAN who answers a DISCOVER first, can make the client read about a kilobyte past the end of the received message. The option walk keeps a pointer and an offset in step, and the only bound check uses the offset: c / addons/dhcp/nxddhcpclient.c:7538, 7572 / while i...
CVE-2026-102720
A DHCP server, or anyone on the LAN who answers a DISCOVER first, can make the client read about a kilobyte past the end of the received message. The option walk keeps a pointer and an offset in step, and the only bound check uses the offset: c / addons/dhcp/nxddhcpclient.c:7538, 7572 / while i...
EUVD-2026-89184
A DHCP server, or anyone on the LAN who answers a DISCOVER first, can make the client read about a kilobyte past the end of the received message. The option walk keeps a pointer and an offset in step, and the only bound check uses the offset: c / addons/dhcp/nxddhcpclient.c:7538, 7572 / while i...
CVE-2026-102720
A DHCP server, or anyone on the LAN who answers a DISCOVER first, can make the client read about a kilobyte past the end of the received message. The option walk keeps a pointer and an offset in step, and the only bound check uses the offset: c / addons/dhcp/nxddhcpclient.c:7538, 7572 / while i...
Cisco ThousandEyes Virtual Appliance DHCP Client Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco ThousandEyes Virtual Appliance. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of DHCP client configuration data. The issue results fro...
CVE-2026-69777
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network...