auth.c in dhcpcd before 7.2.1 allowed attackers to infer secrets by performing latency attacks. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.
Information Disclosure
Dhcpcd
Dhcpcd Project
NVD
CVSS 3.1
5.9
EPSS
2.0%
dhcp.c in dhcpcd before 7.2.1 contains a 1-byte read overflow with DHO_OPTSOVERLOADED. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.
Buffer Overflow
Information Disclosure
Debian
Debian Linux
Dhcpcd
+1
NVD
CVSS 3.1
5.3
EPSS
1.4%