The get_option function in dhcpcd 4.0.0 through 6.x before 6.4.3 allows remote DHCP servers to cause a denial of service by resetting the DHO_OPTIONSOVERLOADED option in the (1) bootfile or (2) servername section, which triggers the option to be processed again.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade dhcpcd | Aug 30, 2017 | Sep 4, 2014 |
| Debian | — | Upgrade dhcpcd5 | Jul 30, 2024 | Sep 4, 2014 |
| Gentoo Linux | — | Upgrade net-misc/dhcpcd. | Oct 30, 2017 | Sep 4, 2014 |
| Ubuntu | — | Upgrade dhcpcd5 | Nov 19, 2024 | Sep 4, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub