[Secure-testing-team] Bug#810620: dhcpcd5: CVE-2016-1504: invalid read/crash via malformed dhcp responses

Salvatore Bonaccorso carnil at debian.org
Sun Jan 10 16:26:24 UTC 2016


Source: dhcpcd5
Version: 6.9.3-1
Severity: important
Tags: security patch upstream fixed-upstream

Hi,

the following vulnerability was published for dhcpcd5.

CVE-2016-1504[0]:
invalid read/crash via malformed dhcp responses

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-1504
[1] http://roy.marples.name/projects/dhcpcd/info/595883e2a431f65d8fabf33059aa4689cca17403

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore



More information about the Secure-testing-team mailing list