| Name | CVE-2012-6699 |
| Description | The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds read) via a crafted response. |
| Source | CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DSA-3534-1 |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|
| dhcpcd (PTS) | trixie | 1:10.1.0-11 | fixed |
| forky, sid | 1:10.2.4-4 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|
| dhcpcd | source | wheezy | 1:3.2.3-11+deb7u1 | | DSA-3534-1 | |
| dhcpcd | source | (unstable) | 1:10.0.1-1 | | | |
Notes
https://launchpadlibrarian.net/228152582/dhcp.c.patch
original ubuntu bug: https://bugs.launchpad.net/ubuntu/+source/dhcpcd/+bug/1517226
epoch'ed 1:10.0.1-1 is technically not fully correct as the epoch only has been
re-introduced in 1:10.0.1-3, cf #1040714