CVE-2014-6060: Low severity dhcpcd vulnerability
Published Sep 4, 2014
·Updated
The getoption function in dhcpcd 4.0.0 through 6.x before 6.4.3 allows remote DHCP servers to cause a denial of service by resetting the DHOOPTIONSOVERLOADED option in the (1) bootfile or (2) servername section, which triggers the option to be processed again.
Affected Software
96 affected components
Dhcpcd Project Dhcpcd=4.0.0
Dhcpcd Project Dhcpcd=4.0.0-alpha1
Dhcpcd Project Dhcpcd=4.0.0-alpha2
Dhcpcd Project Dhcpcd=4.0.0-alpha3
Dhcpcd Project Dhcpcd=4.0.0-beta1
Dhcpcd Project Dhcpcd=4.0.0-beta2
Dhcpcd Project Dhcpcd=4.0.0-beta3
Dhcpcd Project Dhcpcd=4.0.0-beta4
Dhcpcd Project Dhcpcd=4.0.0-beta5
Dhcpcd Project Dhcpcd=4.0.0-beta6
Dhcpcd Project Dhcpcd=4.0.0-beta7
Dhcpcd Project Dhcpcd=4.0.0-beta8
Dhcpcd Project Dhcpcd=4.0.0-beta9
Dhcpcd Project Dhcpcd=4.0.0-rc1
Dhcpcd Project Dhcpcd=4.0.0-rc2
Dhcpcd Project Dhcpcd=4.0.0-rc3
Dhcpcd Project Dhcpcd=4.0.0-rc4
Dhcpcd Project Dhcpcd=4.0.0-rc5
Dhcpcd Project Dhcpcd=4.0.1
Dhcpcd Project Dhcpcd=4.0.2
Dhcpcd Project Dhcpcd=4.0.3
Dhcpcd Project Dhcpcd=4.0.4
Dhcpcd Project Dhcpcd=4.0.5
Dhcpcd Project Dhcpcd=4.0.6
Dhcpcd Project Dhcpcd=4.0.7
Dhcpcd Project Dhcpcd=4.0.10
Dhcpcd Project Dhcpcd=4.0.11
Dhcpcd Project Dhcpcd=4.0.12
Dhcpcd Project Dhcpcd=4.0.13
Dhcpcd Project Dhcpcd=4.0.14
Dhcpcd Project Dhcpcd=4.0.15
Dhcpcd Project Dhcpcd=5.0.0
Dhcpcd Project Dhcpcd=5.0.1
Dhcpcd Project Dhcpcd=5.0.3
Dhcpcd Project Dhcpcd=5.0.4
Dhcpcd Project Dhcpcd=5.0.6
Dhcpcd Project Dhcpcd=5.0.7
Dhcpcd Project Dhcpcd=5.0.8
Dhcpcd Project Dhcpcd=5.0.9
Dhcpcd Project Dhcpcd=5.1.0
Dhcpcd Project Dhcpcd=5.1.1
Dhcpcd Project Dhcpcd=5.1.2
Dhcpcd Project Dhcpcd=5.1.3
Dhcpcd Project Dhcpcd=5.1.4
Dhcpcd Project Dhcpcd=5.1.5
Dhcpcd Project Dhcpcd=5.2.0
Dhcpcd Project Dhcpcd=5.2.1
Dhcpcd Project Dhcpcd=5.2.3
Dhcpcd Project Dhcpcd=5.2.4
Dhcpcd Project Dhcpcd=5.2.5
Dhcpcd Project Dhcpcd=5.2.6
Dhcpcd Project Dhcpcd=5.2.7
Dhcpcd Project Dhcpcd=5.2.8
Dhcpcd Project Dhcpcd=5.2.9
Dhcpcd Project Dhcpcd=5.2.10
Dhcpcd Project Dhcpcd=5.2.11
Dhcpcd Project Dhcpcd=5.2.12
Dhcpcd Project Dhcpcd=5.5.0
Dhcpcd Project Dhcpcd=5.5.1
Dhcpcd Project Dhcpcd=5.5.1-test1
Dhcpcd Project Dhcpcd=5.5.2
Dhcpcd Project Dhcpcd=5.5.3
Dhcpcd Project Dhcpcd=5.5.4
Dhcpcd Project Dhcpcd=5.5.5
Dhcpcd Project Dhcpcd=5.5.6
Dhcpcd Project Dhcpcd=5.6.0
Dhcpcd Project Dhcpcd=5.6.1
Dhcpcd Project Dhcpcd=5.6.2
Dhcpcd Project Dhcpcd=5.6.3
Dhcpcd Project Dhcpcd=5.6.4
Dhcpcd Project Dhcpcd=5.6.5
Dhcpcd Project Dhcpcd=5.6.6
Dhcpcd Project Dhcpcd=5.6.7
Dhcpcd Project Dhcpcd=5.6.8
Dhcpcd Project Dhcpcd=5.99.2
Dhcpcd Project Dhcpcd=5.99.3
Dhcpcd Project Dhcpcd=5.99.4
Dhcpcd Project Dhcpcd=5.99.5
Dhcpcd Project Dhcpcd=5.99.6
Dhcpcd Project Dhcpcd=5.99.7
Dhcpcd Project Dhcpcd=6.0.0
Dhcpcd Project Dhcpcd=6.0.1
Dhcpcd Project Dhcpcd=6.0.2
Dhcpcd Project Dhcpcd=6.0.3
Dhcpcd Project Dhcpcd=6.0.4
Dhcpcd Project Dhcpcd=6.0.5
Dhcpcd Project Dhcpcd=6.1.0
Dhcpcd Project Dhcpcd=6.2.0
Dhcpcd Project Dhcpcd=6.2.1
Dhcpcd Project Dhcpcd=6.3.0
Dhcpcd Project Dhcpcd=6.3.1
Dhcpcd Project Dhcpcd=6.3.2
Dhcpcd Project Dhcpcd=6.4.0
Dhcpcd Project Dhcpcd=6.4.1
Dhcpcd Project Dhcpcd=6.4.2
Google Android<=4.4.3
Remediation
Event History
Sep 4, 2014
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-6060?
CVE-2014-6060 has been rated as a high severity vulnerability due to its potential to cause a denial of service.
2
How do I fix CVE-2014-6060?
To fix CVE-2014-6060, upgrade dhcpcd to version 6.4.3 or later where the vulnerability is patched.
3
What specific versions of dhcpcd are affected by CVE-2014-6060?
CVE-2014-6060 affects dhcpcd versions from 4.0.0 to 6.4.2.
4
Can CVE-2014-6060 be exploited remotely?
Yes, CVE-2014-6060 can be exploited by remote DHCP servers, leading to denial of service.
5
What is the impact of CVE-2014-6060?
The impact of CVE-2014-6060 is a denial of service that can disrupt network services due to repeated processing of options.