oss-sec mailing list archives

Remotely exploitable crash in dhcpcd


From: "Jason A. Donenfeld" <Jason () zx2c4 com>
Date: Fri, 23 Jun 2017 22:53:56 +0200

Hi Roy,

I found that by sending the same exact DHCP response to two different
DHCP requests on different interfaces, I was able to segfault dhcpcd.
The attached patch fixes the problem, though you might want to
investigate a bit further precisely why this is necessary.

Regards,
Jason

Attachment: dhcpcd-7.0.0-crash-fix.patch
Description:


Current thread: