CVE-2012-6700: Buffer Overflow
Published Apr 11, 2016
·Updated
The decodesearch function in dhcp.c in dhcpcd 3.x does not properly free allocated memory, which allows remote DHCP servers to cause a denial of service via a crafted response.
Affected Software
6 affected components
Debian Debian Linux=7.0
Dhcpcd Project Dhcpcd=3.1.9
Dhcpcd Project Dhcpcd=3.2.0
Dhcpcd Project Dhcpcd=3.2.1
Dhcpcd Project Dhcpcd=3.2.2
Dhcpcd Project Dhcpcd=3.2.3
Event History
Apr 11, 2016
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-6700?
CVE-2012-6700 has been classified as a high severity vulnerability due to its potential to cause a denial of service.
2
How do I fix CVE-2012-6700?
To fix CVE-2012-6700, you should update dhcpcd to a version that has addressed the memory management issue.
3
Which versions of dhcpcd are affected by CVE-2012-6700?
CVE-2012-6700 affects dhcpcd versions 3.1.9, 3.2.0, 3.2.1, 3.2.2, and 3.2.3.
4
Can remote DHCP servers exploit CVE-2012-6700?
Yes, remote DHCP servers can exploit CVE-2012-6700 by sending a crafted response that triggers the denial of service.
5
What impact does CVE-2012-6700 have on affected systems?
The impact of CVE-2012-6700 on affected systems includes unexpected crashes and potential downtime due to denial of service.