Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2014-7912

Опубликовано: 30 июл. 2015
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 6.8

Описание

The get_option function in dhcp.c in dhcpcd before 6.2.0, as used in dhcpcd 5.x in Android before 5.1 and other products, does not validate the relationship between length fields and the amount of data, which allows remote DHCP servers to execute arbitrary code or cause a denial of service (memory corruption) via a large length value of an option in a DHCPACK message.

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

not-affected

6.9.1-1
disco

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [code not present]]
esm-infra/focal

DNE

focal

DNE

jammy

DNE

kinetic

DNE

Показывать по

РелизСтатусПримечание
artful

not-affected

6.9.1-1
bionic

not-affected

6.9.1-1
cosmic

not-affected

6.9.1-1
devel

DNE

disco

not-affected

6.9.1-1
esm-apps/bionic

not-affected

6.9.1-1
esm-apps/focal

not-affected

6.9.1-1
esm-apps/jammy

not-affected

6.9.1-1
esm-apps/xenial

not-affected

6.9.1-1
esm-infra-legacy/trusty

needed

Показывать по

EPSS

Процентиль: 66%
0.00524
Низкий

6.8 Medium

CVSS2

Связанные уязвимости

nvd
больше 10 лет назад

The get_option function in dhcp.c in dhcpcd before 6.2.0, as used in dhcpcd 5.x in Android before 5.1 and other products, does not validate the relationship between length fields and the amount of data, which allows remote DHCP servers to execute arbitrary code or cause a denial of service (memory corruption) via a large length value of an option in a DHCPACK message.

debian
больше 10 лет назад

The get_option function in dhcp.c in dhcpcd before 6.2.0, as used in d ...

github
больше 3 лет назад

The get_option function in dhcp.c in dhcpcd before 6.2.0, as used in dhcpcd 5.x in Android before 5.1 and other products, does not validate the relationship between length fields and the amount of data, which allows remote DHCP servers to execute arbitrary code or cause a denial of service (memory corruption) via a large length value of an option in a DHCPACK message.

EPSS

Процентиль: 66%
0.00524
Низкий

6.8 Medium

CVSS2