CVE-2016-1503

CVE-2016-1503 affects dhcpcd prior to version 6.10.0 (used in Android 4.x/5.x/6.x and other products). The issue is a mismanagement of DHCP option lengths in the print_option path, leading to a heap-based buffer overflow that can enable remote code execution or cause a denial of service via malfo...

CVE-2012-6700

The CVE-2012-6700 issue affects dhcpcd 3.x where the decode_search function in dhcp.c fails to free allocated memory, enabling a remote DHCP server to trigger a denial-of-service via a crafted response. Root cause: improper memory deallocation in decode_search. Impact: denial of service (availabi...

CVE-2012-6699

CVE-2012-6699 affects dhcpcd 3.x, where decode_search in dhcp.c can be triggered by a crafted DHCP response from a remote server, causing an out-of-bounds read and denial of service. Connected records confirm this vulnerability and link to advisories (e.g., Debian DSA-3534 and related OSV/NVD ent...

CVE-2019-11579

CVE-2019-11579 affects the dhcpcd DHCP client (dhcpcd) before 7.2.1. It is caused by a 1-byte read overflow in the DHO_OPTSOVERLOADED handling in dhcp.c. The documented remediation is to upgrade to version 7.2.1 or apply vendor patches that address this issue.

CVE-2012-6698

CVE-2012-6698 concerns dhcpcd 3.x: the decode_search function in dhcp.c allows a remote DHCP server to cause a denial of service via an out-of-bounds write in crafted responses. The provided connected documents confirm the affected component and impact; however, they do not specify a concrete pat...

CVE-2019-11766

CVE-2019-11766 affects dhcpcd: dhcp6.c in dhcpcd before 6.11.7 and 7.x before 7.2.2 has a buffer over-read in the D6_OPTION_PD_EXCLUDE feature. Fixed in 6.11.7 and 7.2.2 (or later). Upgrade to a patched release to mitigate.

CVE-2014-6060

CVE-2014-6060 describes a denial-of-service condition in the DHCP client dhcpcd. Affected versions are 4.0.0 through 6.x (before 6.4.3). The root cause is a vulnerability in how a remote DHCP server can reset the DHO_OPTIONSOVERLOADED option in the bootfile or servername DHCP option, triggering t...

CVE-2014-7912

CVE-2014-7912 affects the get_option function in dhcp.c of dhcpcd prior to 6.2.0 (used in dhcpcd 5.x on Android before 5.1 and other products). The vulnerability arises because length fields are not validated against the amount of data, enabling remote DHCP servers to cause memory corruption via ...

CVE-2019-11578

The CVE-2019-11578 entry concerns dhcpcd’s auth.c, with the vulnerability present in versions before 7.2.1. The underlying issue is a latency-based information disclosure that could allow an attacker to infer secrets, yielding partial confidentiality impact. Affected software is dhcpcd; root caus...

CVE-2014-7913

CVE-2014-7913 affects dhcpcd’s DHCP client code. The print_option function in dhcpcd’s dhcp-common.c misinterprets the return value of snprintf, enabling a remote DHCP server to cause arbitrary code execution or a denial of service (memory corruption) via a crafted DHCP message. Affected product ...

CVE-2016-1504

The CVE-2016-1504 entry concerns the dhcpcd DHCP client before version 6.10.0. The vulnerability arises from handling of DHCP option length, enabling remote attackers to trigger an invalid read and crash (Denial of Service). Impact is described as a crash/DoS with network-originated packets; expl...

CVE-2019-11577

CVE-2019-11577 affects dhcpcd prior to 7.2.1, with a buffer overflow in dhcp6_findna (dhcp6.c) when reading NA/TA addresses. The context in connected sources confirms the vulnerability condition and that exposure arises from the relevant code path; no explicit exploitation or patch details are pr...

CVE-2026-56117

CVE-2026-56117: dhcpcd up to version 10.3.2 contains a local heap use-after-free in the control socket handling (src/control.c). The root cause is that control_recvdata() can free the client object while a subsequent READ+HANGUP event reaches control_hangup() with a stale pointer, enabling memory...

CVE-2026-56116

CVE-2026-56116 affects dhcpcd up to version 10.3.2. The vulnerability is in the IPv6 Router Advertisement route information handling, where a memory leak can be triggered by an unauthenticated, same-link attacker sending crafted Router Advertisements. Specifically, Router Advertisements containin...

CVE-2026-56114

CVE-2026-56114 affects dhcpcd up to 10.3.2; the issue is a one-byte stack out-of-bounds write in dhcp6_makemessage() caused by serializing an oversized RFC6603 OPTION_PD_EXCLUDE body in a crafted DHCPv6 ADVERTISE with IA_PD IAPREFIX /0. The vulnerability can allow an unauthenticated same-link att...

CVE-2026-56113

Summary of CVE-2026-56113 : The dhcpcd project (up to version 10.3.2) contains a heap use-after-free vulnerability in the DHCPv6 path. Specifically, in dhcp6_deprecateaddrs(), when processing a crafted DHCPv6 RENEW reply (using RFC6603 OPTION_PD_EXCLUDE) with both the preferred and valid lifetime...