VDB

GCVE-110-MAGEIA-2016-34

GCVE-110-MAGEIA-2016-34
Advisory Published
Vulnetix · Advisory published January 21, 2016
Possible heap overflow in dhcpcd before 6.10.0 caused by malformed dhcp responses due to incorrect option length values (CVE-2016-1503). Possible invalid read in dhcpcd before 6.10.0 caused by malformed dhcp responses can lead to a crash (CVE-2016-1504). The dhcpcd package has been updated to version 6.10.0 which fixes these issues and has several other bug fixes and enhancements.

Affected Products

VendorProductVersionsPlatforms
Mageiasteam0 (affected), 1.0.0.51-1.1.mga5.nonfree (unaffected)—
Mageiadhcpcd0 (affected), 6.10.0-1.mga5 (unaffected), 0 (affected), 6.10.0-1.mga5 (unaffected)—

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›