CVE-2019-11579

CVE-2019-11579 affects the dhcpcd DHCP client (dhcpcd) before 7.2.1. It is caused by a 1-byte read overflow in the DHO_OPTSOVERLOADED handling in dhcp.c. The documented remediation is to upgrade to version 7.2.1 or apply vendor patches that address this issue.

CVE-2019-11766

CVE-2019-11766 affects dhcpcd: dhcp6.c in dhcpcd before 6.11.7 and 7.x before 7.2.2 has a buffer over-read in the D6_OPTION_PD_EXCLUDE feature. Fixed in 6.11.7 and 7.2.2 (or later). Upgrade to a patched release to mitigate.

CVE-2019-11578

The CVE-2019-11578 entry concerns dhcpcd’s auth.c, with the vulnerability present in versions before 7.2.1. The underlying issue is a latency-based information disclosure that could allow an attacker to infer secrets, yielding partial confidentiality impact. Affected software is dhcpcd; root caus...

CVE-2019-11577

CVE-2019-11577 affects dhcpcd prior to 7.2.1, with a buffer overflow in dhcp6_findna (dhcp6.c) when reading NA/TA addresses. The context in connected sources confirms the vulnerability condition and that exposure arises from the relevant code path; no explicit exploitation or patch details are pr...