WID-SEC-W-2026-2046

DeutschShown in its original language — a full translation is planned for a future version.

dhcpcd: Mehrere Schwachstellen ermöglichen Denial of Service

view advisory published 2026-06-23

Ein Angreifer kann mehrere Schwachstellen in dhcpcd ausnutzen, um einen Denial of Service Angriff durchzuführen.

describes (5)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-56117US	medium5.5	0.14% (3rd)	—	2026-06-23
dhcpcd through 10.3.2, fixed in commit 78ea09e, contains a heap use-after-free vulnerability in the control socket handling within src/control.c that allows local unprivileged atta…
CVE-2026-56116US	—	0.29% (21st)	—	2026-06-23
dhcpcd through 10.3.2, fixed in commit 708b4a5, contains a memory leak vulnerability in the IPv6 Router Advertisement route information handling that allows an unauthenticated same…
CVE-2026-56115US	—OT elevated	0.45% (39th)	—	2026-06-23
Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low-privileged users to perform administrative actions by exploiting missing role e…
CVE-2026-56114US	medium6.5	0.27% (19th)	—	2026-06-23
dhcpcd through 10.3.2, fixed in commit 2f00c7b, contains a one-byte stack out-of-bounds write vulnerability in dhcp6_makemessage() in src/dhcp6.c that allows unauthenticated same-l…
CVE-2026-56113US	medium6.5	0.27% (19th)	—	2026-06-23
dhcpcd through 10.3.2, fixed in commit 5733d3c, contains a heap use-after-free vulnerability that allows unauthenticated same-link attackers to crash the daemon by sending a crafte…

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.