EUVD-2026-26357CVSS VectorNVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
8DescriptionNVD
As dhclient is building an environment to pass to dhclient-script, it may need to resize the array of string pointers. The code which expands the array incorrectly calculates its new size when requesting memory, resulting in a heap buffer overrun.
A specially crafted packet can cause dhclient to overrun its buffer of environment entries. This can result in a crash, but it may be possible to leverage this bug to achieve remote code execution.
AnalysisAI
Heap buffer overflow in FreeBSD dhclient enables potential remote code execution when processing maliciously crafted DHCP packets. Affects FreeBSD 13.5, 14.3, 14.4, and 15.0 branches prior to security patches. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Inventory all FreeBSD systems running versions 13.5, 14.3, 14.4, or 15.0 and identify those with dhclient exposed to untrusted networks. Within 7 days: Implement network segmentation to restrict DHCP traffic to trusted sources only, and consider disabling dhclient on systems where static IP configuration is feasible. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today