Memory corruption

The getoption function in dhcp.c in dhcpcd before 6.2.0, as used in dhcpcd 5.x in Android before 5.1 and other products, does not validate the relationship between length fields and the amount of data, which allows remote DHCP servers to execute arbitrary code or cause a denial of service memory...

CVE-2014-6060

The getoption function in dhcpcd 4.0.0 through 6.x before 6.4.3 allows remote DHCP servers to cause a denial of service by resetting the DHOOPTIONSOVERLOADED option in the 1 bootfile or 2 servername section, which triggers the option to be processed again...

CVE-2014-6060

CVE-2014-6060 describes a denial-of-service condition in the DHCP client dhcpcd. Affected versions are 4.0.0 through 6.x (before 6.4.3). The root cause is a vulnerability in how a remote DHCP server can reset the DHO_OPTIONSOVERLOADED option in the bootfile or servername DHCP option, triggering t...