https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 01:43:41 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-56116 <p><strong>Affected:</strong> Alpaquita:25: dhcpcd, Alpaquita:stream: dhcpcd</p> <p><strong>Affected:</strong> Alpaquita:25: dhcpcd, Alpaquita:stream: dhcpcd</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-56116 https://cve.radiocsirt.org/vuln/euvd-2026-341799 EUVD-2026-341799 https://cve.radiocsirt.org/vuln/euvd-2026-341799 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56116 <p>dhcpcd through 10.3.2, fixed in commit 708b4a5, contains a memory leak vulnerability in the IPv6 Router Advertisement route information handling that allows an unauthenticated same-link attacker to cause denial of service by sending crafted Router Advertisements. Attackers can repeatedly send Router Advertisements containing Route Information options with a lifetime of zero, triggering unfreed allocations in routeinfo_findalloc() that cause linear memory exhaustion and eventual daemon crash.</p> <p>dhcpcd through 10.3.2, fixed in commit 708b4a5, contains a memory leak vulnerability in the IPv6 Router Advertisement route information handling that allows an unauthenticated same-link attacker to cause denial of service by sending crafted Router Advertisements. Attackers can repeatedly send Router Advertisements containing Route Information options with a lifetime of zero, triggering unfreed allocations in routeinfo_findalloc() that cause linear memory exhaustion and eventual daemon crash.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-56116 https://cve.radiocsirt.org/vuln/ghsa-g36w-q35r-qvg3 <p>dhcpcd through 10.3.2, fixed in commit 708b4a5, contains a memory leak vulnerability in the IPv6 Router Advertisement route information handling that allows an unauthenticated same-link attacker to cause denial of service by sending crafted Router Advertisements. Attackers can repeatedly send Router Advertisements containing Route Information options with a lifetime of zero, triggering unfreed allocations in routeinfo_findalloc() that cause linear memory exhaustion and eventual daemon crash.</p> <p>dhcpcd through 10.3.2, fixed in commit 708b4a5, contains a memory leak vulnerability in the IPv6 Router Advertisement route information handling that allows an unauthenticated same-link attacker to cause denial of service by sending crafted Router Advertisements. Attackers can repeatedly send Router Advertisements containing Route Information options with a lifetime of zero, triggering unfreed allocations in routeinfo_findalloc() that cause linear memory exhaustion and eventual daemon crash.</p> https://cve.radiocsirt.org/vuln/ghsa-g36w-q35r-qvg3 https://cve.radiocsirt.org/vuln/msrc_cve-2026-56116 msrc_CVE-2026-56116 https://cve.radiocsirt.org/vuln/msrc_cve-2026-56116 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11473-1 <p>dhcpcd-10.5.0-1.1 on GA media</p> <p>dhcpcd-10.5.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11473-1 https://cve.radiocsirt.org/vuln/suse-su-2026:23400-1 <p>Security update for dhcpcd</p> <p>Security update for dhcpcd</p> https://cve.radiocsirt.org/vuln/suse-su-2026:23400-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56116 <p><strong>Affected:</strong> Ubuntu:25.10: dhcpcd, Ubuntu:26.04:LTS: dhcpcd</p> <p>dhcpcd through 10.3.2, fixed in commit 708b4a5, contains a memory leak vulnerability in the IPv6 Router Advertisement route information handling that allows an unauthenticated same-link attacker to cause denial of service by sending crafted Router Advertisements. Attackers can repeatedly send Router Advertisements containing Route Information options with a lifetime of zero, triggering unfreed allocations in routeinfo_findalloc() that cause linear memory exhaustion and eventual daemon crash.</p> <p><strong>Affected:</strong> Ubuntu:25.10: dhcpcd, Ubuntu:26.04:LTS: dhcpcd</p> <p>dhcpcd through 10.3.2, fixed in commit 708b4a5, contains a memory leak vulnerability in the IPv6 Router Advertisement route information handling that allows an unauthenticated same-link attacker to cause denial of service by sending crafted Router Advertisements. Attackers can repeatedly send Router Advertisements containing Route Information options with a lifetime of zero, triggering unfreed allocations in routeinfo_findalloc() that cause linear memory exhaustion and eventual daemon crash.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56116 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2046 <p>Ein Angreifer kann mehrere Schwachstellen in dhcpcd ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in dhcpcd ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2046