https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 01:18:05 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-56117 <p><strong>Affected:</strong> Alpaquita:25: dhcpcd, Alpaquita:stream: dhcpcd</p> <p><strong>Affected:</strong> Alpaquita:25: dhcpcd, Alpaquita:stream: dhcpcd</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-56117 https://cve.radiocsirt.org/vuln/euvd-2026-341800 EUVD-2026-341800 https://cve.radiocsirt.org/vuln/euvd-2026-341800 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56117 <p>dhcpcd through 10.3.2, fixed in commit 78ea09e, contains a heap use-after-free vulnerability in the control socket handling within src/control.c that allows local unprivileged attackers to trigger memory corruption when privilege separation is disabled. Attackers can connect to the control socket and send a privileged command such as -x, causing control_recvdata() to free the client object while the same READ+HANGUP event subsequently reaches control_hangup() with the stale pointer, resulting in a use-after-free condition exploitable in deployments using --disable-privsep or where privsep initialization has failed with the control socket operating in mode 0666.</p> <p>dhcpcd through 10.3.2, fixed in commit 78ea09e, contains a heap use-after-free vulnerability in the control socket handling within src/control.c that allows local unprivileged attackers to trigger memory corruption when privilege separation is disabled. Attackers can connect to the control socket and send a privileged command such as -x, causing control_recvdata() to free the client object while the same READ+HANGUP event subsequently reaches control_hangup() with the stale pointer, resulting in a use-after-free condition exploitable in deployments using --disable-privsep or where privsep initialization has failed with the control socket operating in mode 0666.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-56117 https://cve.radiocsirt.org/vuln/ghsa-p284-r695-7gxf <p>dhcpcd through 10.3.2, fixed in commit 78ea09e, contains a heap use-after-free vulnerability in the control socket handling within src/control.c that allows local unprivileged attackers to trigger memory corruption when privilege separation is disabled. Attackers can connect to the control socket and send a privileged command such as -x, causing control_recvdata() to free the client object while the same READ+HANGUP event subsequently reaches control_hangup() with the stale pointer, resulting in a use-after-free condition exploitable in deployments using --disable-privsep or where privsep initialization has failed with the control socket operating in mode 0666.</p> <p>dhcpcd through 10.3.2, fixed in commit 78ea09e, contains a heap use-after-free vulnerability in the control socket handling within src/control.c that allows local unprivileged attackers to trigger memory corruption when privilege separation is disabled. Attackers can connect to the control socket and send a privileged command such as -x, causing control_recvdata() to free the client object while the same READ+HANGUP event subsequently reaches control_hangup() with the stale pointer, resulting in a use-after-free condition exploitable in deployments using --disable-privsep or where privsep initialization has failed with the control socket operating in mode 0666.</p> https://cve.radiocsirt.org/vuln/ghsa-p284-r695-7gxf https://cve.radiocsirt.org/vuln/opensuse-su-2026:11473-1 <p>dhcpcd-10.5.0-1.1 on GA media</p> <p>dhcpcd-10.5.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11473-1 https://cve.radiocsirt.org/vuln/suse-su-2026:23400-1 <p>Security update for dhcpcd</p> <p>Security update for dhcpcd</p> https://cve.radiocsirt.org/vuln/suse-su-2026:23400-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56117 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: dhcpcd, Ubuntu:25.10: dhcpcd, Ubuntu:26.04:LTS: dhcpcd</p> <p>dhcpcd through 10.3.2, fixed in commit 78ea09e, contains a heap use-after-free vulnerability in the control socket handling within src/control.c that allows local unprivileged attackers to trigger memory corruption when privilege separation is disabled. Attackers can connect to the control socket and send a privileged command such as -x, causing control_recvdata() to free the client object while the same READ+HANGUP event subsequently reaches control_hangup() with the stale pointer, resulting in a use-after-free condition exploitable in deployments using --disable-privsep or where privsep initialization has failed with the control socket operating in mode 0666.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: dhcpcd, Ubuntu:25.10: dhcpcd, Ubuntu:26.04:LTS: dhcpcd</p> <p>dhcpcd through 10.3.2, fixed in commit 78ea09e, contains a heap use-after-free vulnerability in the control socket handling within src/control.c that allows local unprivileged attackers to trigger memory corruption when privilege separation is disabled. Attackers can connect to the control socket and send a privileged command such as -x, causing control_recvdata() to free the client object while the same READ+HANGUP event subsequently reaches control_hangup() with the stale pointer, resulting in a use-after-free condition exploitable in deployments using --disable-privsep or where privsep initialization has failed with the control socket operating in mode 0666.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56117 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2046 <p>Ein Angreifer kann mehrere Schwachstellen in dhcpcd ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in dhcpcd ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2046