| Name | CVE-2012-6700 |
| Description | The decode_search function in dhcp.c in dhcpcd 3.x does not properly free allocated memory, which allows remote DHCP servers to cause a denial of service via a crafted response. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DLA-362-1, DSA-3534-1 |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|
| dhcpcd (PTS) | trixie | 1:10.1.0-10 | fixed |
| sid | 1:10.1.0-11 | fixed |
The information below is based on the following data on fixed versions.
Notes
https://launchpadlibrarian.net/228152582/dhcp.c.patch
original ubuntu bug: https://bugs.launchpad.net/ubuntu/+source/dhcpcd/+bug/1517226
epoch'ed 1:10.0.1-1 is technically not fully correct as the epoch only has been
re-introduced in 1:10.0.1-3, cf #1040714