Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-7912
HistoryJul 30, 2015 - 12:00 a.m.

CVE-2014-7912

2015-07-3000:00:00
ubuntu.com
ubuntu.com
10

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.4%

JSON

The get_option function in dhcp.c in dhcpcd before 6.2.0, as used in dhcpcd
5.x in Android before 5.1 and other products, does not validate the
relationship between length fields and the amount of data, which allows
remote DHCP servers to execute arbitrary code or cause a denial of service
(memory corruption) via a large length value of an option in a DHCPACK
message.

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchdhcpcd5< anyUNKNOWN

Related

debiancve 1
prion 1
cve 1
nessus 3
freebsd 1
cvelist 1
zdi 1
nvd 1
openvas 1
android 1
debian 1
osv 1
debiancve
debiancve
CVE-2014-7912
2015-07-30 00:59:00
prion
prion
Memory corruption
2015-07-30 00:59:00
cve
cve
CVE-2014-7912
2015-07-30 00:59:00
nessus
nessus
FreeBSD : dhcpcd -- remote code execution/denial of service (092156c9-04d7-11e6-b1ce-002590263bf5)
2016-04-18 00:00:00
Debian DLA-506-1 : dhcpcd5 security update
2016-06-07 00:00:00
Google Android Operating System < 4.4.0 Multiple Vulnerabilities
2015-04-10 00:00:00
freebsd
freebsd
dhcpcd -- remote code execution/denial of service
2015-06-19 00:00:00
cvelist
cvelist
CVE-2014-7912
2015-07-30 00:00:00
zdi
zdi
(Mobile Pwn2Own) Google Android DHCP Parsing Remote Code Execution Vulnerability
2015-03-12 00:00:00
nvd
nvd
CVE-2014-7912
2015-07-30 00:59:00
openvas
openvas
Debian: Security Advisory (DLA-506-1)
2023-03-08 00:00:00
android
android
dhcpd buffer overrun
2015-03-12 00:00:00
debian
debian
[SECURITY] [DLA 506-1] dhcpcd5 security update
2016-06-06 21:38:06
osv
osv
dhcpcd5 - security update
2016-06-06 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.4%

JSON
Related for UB:CVE-2014-7912
debiancve1prion1cve1nessus3freebsd1cvelist1zdi1nvd1openvas1android1debian1osv1