CVE-2026-42512

CVE-2026-42512 is a remote-out-of-bounds write vulnerability in the FreeBSD dhclient environment construction. The bug arises when dhclient resizes the array of environment string pointers passed to dhclient-script; the memory allocation size is incorrectly calculated, leading to a heap buffer ov...

CVE-2026-42512

As dhclient is building an environment to pass to dhclient-script, it may need to resize the array of string pointers. The code which expands the array incorrectly calculates its new size when requesting memory, resulting in a heap buffer overrun. A specially crafted packet can cause dhclient to...

FreeBSD : FreeBSD -- Remotely triggerable out-of-bounds heap write in dhclient (58acf4c5-4435-11f1-bb07-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 58acf4c5-4435-11f1-bb07-bc241121aa0a advisory. As dhclient is building an environment to pass to dhclient-script, it may need to resize the array of...