CVE-2025-70102: dhcpcd: NULL Pointer Dereference in Configuration Option Parsing
A NULL pointer dereference occurs in Roy Marples NetworkConfiguration/dhcpcd 10.3.0 while parsing configuration options. In parseoption() (src/if-options.c:1886), the code performs a member access on a NULL pointer of type 'struct dhcpopt' when an unexpected/invalid option token or parsing state causes the lookup to yield NULL. The instrumented fuzzing build reports 'runtime error: member access within null pointer of type struct dhcpopt' and aborts.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/dhcpcdto a version that resolves this vulnerability.Fixed in 1:10.1.0-11+deb13u3 - Upgrade
Upgrade
debian/dhcpcdto a version that resolves this vulnerability.Fixed in 1:10.3.1-1 - Upgrade
Upgrade
debian/dhcpcd5to a version that resolves this vulnerability.Fixed in 9.4.1-24~deb12u5 - Upgrade
Upgrade
debian/dhcpcdto a version that resolves this vulnerability.Fixed in 1:10.1.0-11+deb13u4Fixed in 1:10.5.2-6
Event History
Frequently Asked Questions
What is the severity of CVE-2025-70102?
The severity of CVE-2025-70102 is rated as medium with a CVSS score of 6.3.
How do I fix CVE-2025-70102?
To fix CVE-2025-70102, update to a version of Roy Marples Dhcpcd that addresses the NULL pointer dereference issue.
What causes the NULL pointer dereference in CVE-2025-70102?
The NULL pointer dereference in CVE-2025-70102 is caused by parsing configuration options in an unexpected or invalid state.
Which software is affected by CVE-2025-70102?
CVE-2025-70102 affects the Roy Marples Dhcpcd software version 10.3.0 and earlier.
What type of vulnerability is CVE-2025-70102 classified as?
CVE-2025-70102 is classified as a NULL pointer dereference vulnerability.