21 matches found
dhcpcd parse_option() DoS
The vulnerability of the parseoption function in the if-options.c file of the DHCP server dhcpcd is related to the pointer dereferencing. Exploiting this vulnerability could allow a attacker to trigger a service denial...
dhcpcd parse_option() Code Execution
The vulnerability of the parseoption function in the if-options.c file is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
dhcpcd parse_option() DoS
The vulnerability of the parseoption function in the DHCP server dhcpcd is related to its dependence on behaviors that are uncertain for each implementation type. Exploiting this vulnerability could allow a malicious actor to cause service failures using a specially crafted configuration file...
SUSE-SU-2026:22542-1 Security update for dhcpcd
This update for dhcpcd fixes the following issue Update to 10.3.2: - CVE-2025-70102: NULL pointer dereference in parseoption when processing a specially crafted configuration input bsc1268761. Changes for dhcpcd: options: Ensure ldop is not NULL dereferenced DHCP: Don't run double EXPIRE hooks on...
SUSE-SU-2026:22561-1 Security update for dhcpcd
This update for dhcpcd fixes the following issue Update to 10.3.2: - CVE-2025-70102: NULL pointer dereference in parseoption when processing a specially crafted configuration input bsc1268761. Changes for dhcpcd: options: Ensure ldop is not NULL dereferenced DHCP: Don't run double EXPIRE hooks on...
OPENSUSE-SU-2026:21220-1 Security update for dhcpcd
This update for dhcpcd fixes the following issue Update to 10.3.2: - CVE-2025-70102: NULL pointer dereference in parseoption when processing a specially crafted configuration input bsc1268761. Changes for dhcpcd: options: Ensure ldop is not NULL dereferenced DHCP: Don't run double EXPIRE hooks on...
CVE-2026-57234
A flaw was found in Nokogiri, an XML and HTML library for Ruby. The NONET parse option, intended to prevent external resource fetching, was not correctly enforced in the JRuby implementation of Nokogiri::XML::Schema. This oversight could allow a specially crafted XML schema to fetch external...
SUSE CVE-2026-57234
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, the NONET parse option, which Nokogiri turns on by default for Nokogiri::XML::Schema see CVE-2020-26247, was not correctly enforced on the JRuby implementation. As a result, a schema parsed with...
CVE-2026-57234: Improper Handling of Case Sensitivity
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, the NONET parse option, which Nokogiri turns on by default for Nokogiri::XML::Schema see CVE-2020-26247, was not correctly enforced on the JRuby implementation. As a result, a schema parsed with...
CVE-2025-70102
A NULL pointer dereference occurs in Roy Marples NetworkConfiguration/dhcpcd 10.3.0 while parsing configuration options. In parseoption src/if-options.c:1886, the code performs a member access on a NULL pointer of type 'struct dhcpopt' when an unexpected/invalid option token or parsing state caus...
CVE-2025-70102
A NULL pointer dereference occurs in Roy Marples NetworkConfiguration/dhcpcd 10.3.0 while parsing configuration options. In parseoption src/if-options.c:1886, the code performs a member access on a NULL pointer of type 'struct dhcpopt' when an unexpected/invalid option token or parsing state caus...
CVE-2025-70102
A NULL pointer dereference exists in the dhcpcd DHCP client (version 10.3.0) within the parse_option() function (src/if-options.c:1886). The vulnerability occurs when the software processes a specially crafted configuration input containing an unexpected or invalid option token, leading the code ...
Cpio parse_opt() DoS
The vulnerability of the parseopt function in the Cpio archiver utility is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2025-55507
Уязвимость функции parse option файла if-options.c DHCP-сервера dhcpcd связана с переполнением буфера в динамической памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
EUVD-2022-48113
Malicious code in bioql PyPI...
CVE-2022-45213
perfSONAR before 4.4.6 inadvertently supports the parse option for a file:// URL...
SUSE CVE-2024-45775
A flaw was found in grub2 where the grubextcmddispatcher function calls grubarglistalloc to allocate memory for the grub's argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parseoption function, leading...
DEBIAN-CVE-2024-45775
A flaw was found in grub2 where the grubextcmddispatcher function calls grubarglistalloc to allocate memory for the grub's argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parseoption function, leading...
