CVE-2014-6060

Name	CVE-2014-6060
Description	The get_option function in dhcpcd 4.0.0 through 6.x before 6.4.3 allows remote DHCP servers to cause a denial of service by resetting the DHO_OPTIONSOVERLOADED option in the (1) bootfile or (2) servername section, which triggers the option to be processed again.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	770043

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
dhcpcd (PTS)	trixie	1:10.1.0-11	fixed
	forky, sid	1:10.2.4-4	fixed
dhcpcd5 (PTS)	bullseye	7.1.0-2	fixed
	bookworm	9.4.1-24~deb12u4	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Debian Bugs
dhcpcd	source	(unstable)	(not affected)
dhcpcd5	source	wheezy	5.5.6-1+deb7u1
dhcpcd5	source	(unstable)	6.0.5-2	low	770043

- dhcpcd <not-affected> (Affects dhcpcd 4.0.0 to 6.4.2)
http://roy.marples.name/projects/dhcpcd/ci/1d2b93aa5ce25a8a710082fe2d36a6bf7f5794d5?sbs=0