| Name | CVE-2012-6700 |
| Description | The decode_search function in dhcp.c in dhcpcd 3.x does not properly free allocated memory, which allows remote DHCP servers to cause a denial of service via a crafted response. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more) |
| References | DLA-362-1, DSA-3534-1 |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| dhcpcd | source | squeeze | 1:3.2.3-5+squeeze2 | DLA-362-1 | ||
| dhcpcd | source | wheezy | 1:3.2.3-11+deb7u1 | DSA-3534-1 | ||
| dhcpcd | source | (unstable) | (unfixed) |
https://launchpadlibrarian.net/228152582/dhcp.c.patch
original ubuntu bug: https://bugs.launchpad.net/ubuntu/+source/dhcpcd/+bug/1517226