CVE-2012-2152

CVE-2012-2152 is a stack-based overflow in the dhcpcd 3.2.3 get_packet() function (socket.c) that can be triggered by a long packet, enabling a remote attacker to crash the service and potentially execute code. Public advisories and OpenVAS entries corroborate the vulnerability in dhcpcd and desc...

CVE-2011-0996

The CVE-2011-0996 issue affects the dhcpcd DHCP client. A rogue DHCP server can supply a hostname containing shell metacharacters, enabling an attacker to trigger arbitrary command execution on the client. Public advisories describe this as impacting dhcpcd prior to version 5.2.12, with fixes imp...