Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 4 articles for you...
100
security advisorymoderateSuSESUSE dhcpcd Moderate NULL Pointer Issue Vuln 2026-22542-1
An update that solves one vulnerability can now be installed.. # Security update for dhcpcd Announcement ID: SUSE-SU-2026:22542-1 Release Date: 2026-07-06T20:10:31Z Rating: moderate References: * bsc#1268761 Cross-References: * CVE-2025-70102 CVSS scores: * CVE-2025-70102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-70102 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-70102 ( NVD ): 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for dhcpcd fixes the following issue Update to 10.3.2: * CVE-2025-70102: NULL pointer dereference in `parse_option()` when processing a specially crafted configuration input (bsc#1268761). Changes for dhcpcd: * options: Ensure ldop is not NULL dereferenced * DHCP: Don't run double EXPIRE hooks on carrier loss * DHCP: free the state when dropping on state NONE * BSD: don't send uninitialised memory using ps_root_indirectioctl * Fix fallback_time option * IPv4: Ignore DHCP state when building routes * route: Routes may not have an interface assinged * options: Ensure that an overly long bitflag string does not crash * options: Don't assume vsio options have an argument * common: Cast via uintptr_t rather than unsigned long in UNCONST * privsep: Ensure we recv for real after a successful recv MSG_PEEK * DHCP: Add parentheses to macro definitions * ipv6nd: empty IPV6RA_EXPIRE eloop queue when dropping * privsep: enforce message boundaries with MSG_EOR on our messages * Protocols will notify when dhcpcd can exit * DHCP: Don't request T1 and T2 * DHCP: Don't request a lease time * DHCP6: Don't exit if using DHCP4 INFORM in non manager mode * ND: Route Information Option prefix is optional * ipv6: respect slaac hwaddr to really use the hwaddr * When stopping all interfaces at exit andreleasing, remove persistance * NetBSD: Delete RTF_CONNECTED route when changing it * privsep: Drain the log when the root process is exiting * eloop: vastly reworked, kqueue and epoll support on by default ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1147=1 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * dhcpcd-debugsource-10.3.2-160000.1.2 * dhcpcd-10.3.2-160000.1.2 * dhcpcd-debuginfo-10.3.2-160000.1.2 ## References: * https://www.suse.com/security/cve/CVE-2025-70102.html * https://bugzilla.suse.com/show_bug.cgi?id=1268761 . Enhance security with the latest SUSE update for dhcpcd, addressing a NULL pointer issue and strengthening system stability.. SUSE updates, dhcpcd patch, system security, moderate threat. . Severity: moderate. LinuxSecurity.com Team
Jul 13, 2026
•moderate
SuSE
202
security advisorymoderatenull pointeropenSUSE dhcpcd Moderate NULL Pointer Issue Fix 2026-21220-1
An update that solves one vulnerability and has one bug fix can now be installed.. openSUSE security update: security update for dhcpcd ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21220-1 Rating: moderate References: * bsc#1268761 Cross-References: * CVE-2025-70102 CVSS scores: * CVE-2025-70102 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-70102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has one bug fix can now be installed. Description: This update for dhcpcd fixes the following issue Update to 10.3.2: - CVE-2025-70102: NULL pointer dereference in `parse_option()` when processing a specially crafted configuration input (bsc#1268761). Changes for dhcpcd: * options: Ensure ldop is not NULL dereferenced * DHCP: Don't run double EXPIRE hooks on carrier loss * DHCP: free the state when dropping on state NONE * BSD: don't send uninitialised memory using ps_root_indirectioctl * Fix fallback_time option * IPv4: Ignore DHCP state when building routes * route: Routes may not have an interface assinged * options: Ensure that an overly long bitflag string does not crash * options: Don't assume vsio options have an argument * common: Cast via uintptr_t rather than unsigned long in UNCONST * privsep: Ensure we recv for real after a successful recv MSG_PEEK * DHCP: Add parentheses to macro definitions * ipv6nd: empty IPV6RA_EXPIRE eloop queue when dropping * privsep: enforce message boundaries with MSG_EOR on our messages * Protocols will notify when dhcpcd can exit * DHCP: Don't request T1 and T2 * DHCP: Don't request a lease time * DHCP6: Don't exit if using DHCP4 INFORM in non manager mode * ND: Route Information Option prefix is optional * ipv6: respect slaac hwaddr to really use the hwaddr * When stoppingall interfaces at exit and releasing, remove persistance * NetBSD: Delete RTF_CONNECTED route when changing it * privsep: Drain the log when the root process is exiting * eloop: vastly reworked, kqueue and epoll support on by default Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-1147=1 Package List: - openSUSE Leap 16.0: dhcpcd-10.3.2-160000.1.1 References: * https://www.suse.com/security/cve/CVE-2025-70102.html . Update for openSUSE dhcpcd addresses moderate flaws to protect network configurations against exploitation.. openSUSE dhcpcd patch NULL security update. . Severity: moderate. LinuxSecurity.com Team
Jul 03, 2026
•moderate
OpenSUSE
91
security advisorydenial of servicegentooGentoo: GLSA-201606-08 Moderate Risks Posed by DHCP Client Escalation
Multiple vulnerabilities have been found in dhcpcd allowing remote attackers to possibly execute arbitrary code or cause a Denial of Service. [More...]. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201606-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: dhcpcd: Multiple vulnerabilities Date: June 18, 2016 Bugs: #571152 ID: 201606-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been found in dhcpcd allowing remote attackers to possibly execute arbitrary code or cause a Denial of Service. Background ========= A fully featured, yet light weight RFC2131 compliant DHCP client Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-misc/dhcpcd < 6.10.0 > = 6.10.0 Description ========== A heap overflow can be trigged via malformed DHCP responses in the print_option (via dhcp_envoption1) due to incorrect option length values. These vulnerabilities could also allow remote attackers to trigger an invalid read/crash via malformed DHCP responses. Impact ===== Remote attackers could possibly execute arbitrary code with the privileges of the process or cause Denial of Service. Workaround ========= There is no known workaround at this time. Resolution ========= All dhcpcd users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =net-misc/dhcpcd-6.10.0†References ========= [ 1 ] CVE-2016-1503 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-1503 [ 2 ]CVE-2016-1504 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-1504 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201606-07 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Jun 18, 2016
Gentoo
87
security advisorydenial of servicecriticalDebian Oldstable DSA-3534-1 Critical: DHCPCD Denial Of Service
Guido Vranken discovered several vulnerabilities in dhcpcd, a DHCP client, which may result in denial of service. For the oldstable distribution (wheezy), these problems have been fixed . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3534-1
Mar 29, 2016
•Critical
Debian
198
security advisorydenial of servicesecurity issueArch Linux 201601-7 Medium Severity: dhcpcd Denial Of Service
The package dhcpcd before version 6.10.0-1 is vulnerable to denial of service. . Arch Linux Security Advisory ASA-201601-7 ======================================== Severity: Medium Date : 2016-01-11 CVE-ID : CVE-2016-1503 CVE-2016-1504 Package : dhcpcd Type : denial of service Remote : Yes Link : https://wiki.archlinux.org/title/CVE Summary ====== The package dhcpcd before version 6.10.0-1 is vulnerable to denial of service. Resolution ========= Upgrade to 6.10.0-1. # pacman -Syu "dhcpcd> =6.10.0-1" The problem has been fixed upstream in version 6.10.0. Workaround ========= None. Description ========== - CVE-2016-1503 (denial of service) An issue has been discovered that can lead to a heap overflow via malformed dhcp responses later in print_option (via dhcp_envoption1) due to incorrect option length values. - CVE-2016-1504 (denial of service) A malformed dhcp response can lead to an invalid read/crash leading to denial of service. Impact ===== A remote attacker is able to send specially crafted packets leading to application crash resulting in denial of service. References ========= https://www.cve.org/CVERecord?id=CVE-2016-1503 https://www.cve.org/CVERecord?id=CVE-2016-1504 . Ubuntu Linux security notice regarding OpenSSH discloses a moderate severity vulnerability patched in release 9.0p1-1.. dhcpcd, Denial Of Service, Arch Linux, Medium Severity. . Severity: Medium. LinuxSecurity.com Team
Jan 11, 2016
•Medium
ArchLinux
91
security advisorydenial of servicegentooGentoo: 201409-03 Normal Severity: dhcpcd Denial of Service
A vulnerability in dhcpcd can lead to a Denial of Service condition.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201409-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: dhcpcd: Denial of service Date: September 03, 2014 Bugs: #518596 ID: 201409-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= A vulnerability in dhcpcd can lead to a Denial of Service condition. Background ========= dhcpcd is a fully featured, yet light weight RFC2131 compliant DHCP client. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-misc/dhcpcd < 6.4.3 > = 6.4.3 Description ========== A vulnerability has been discovered in dhcpcd. A malicious dhcp server can set flags as part of the dhcp reply that can cause a Denial of Service condition. Impact ===== A remote attacker can cause a Denial of Service condition. Workaround ========= There is no known workaround at this time. Resolution ========= All dhcpcd users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =net-misc/dhcpcd-6.4.3" References ========= [ 1 ] CVE-2014-6060 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-6060 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201409-03 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Anysecurity concerns should be addressed to
Sep 03, 2014
Gentoo
99
security advisorydenial of servicesecurity issueSlackware 14.1: SSA:2016-210-03 Critical: DHCPCD Service Interruption
New dhcpcd packages are available for Slackware 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] dhcpcd (SSA:2014-213-02) New dhcpcd packages are available for Slackware 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches/packages/dhcpcd-6.0.5-i486-3_slack14.1.txz: Rebuilt. This update fixes a security issue where a specially crafted packet received from a malicious DHCP server causes dhcpcd to enter an infinite loop causing a denial of service. Thanks to Tobias Stoeckmann for the bug report. (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 13.1: ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/dhcpcd-5.2.12-i486-2_slack13.1.txz Updated package for Slackware x86_64 13.1: ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/dhcpcd-5.2.12-x86_64-2_slack13.1.txz Updated package for Slackware 13.37: ftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/dhcpcd-5.2.12-i486-2_slack13.37.txz Updated package for Slackware x86_64 13.37: ftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/dhcpcd-5.2.12-x86_64-2_slack13.37.txz Updated package for Slackware 14.0: ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/dhcpcd-5.5.6-i486-2_slack14.0.txz Updated package for Slackware x86_64 14.0: Updated package for Slackware 14.1: ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/dhcpcd-6.0.5-i486-3_slack14.1.txz Updated package for Slackware x86_6414.1: ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/dhcpcd-6.0.5-x86_64-3_slack14.1.txz Updated package for Slackware -current: Updated package for Slackware x86_64 -current: MD5 signatures: +-------------+ Slackware 13.1 package: 7ee61ba111c58bfe6147890bae50846e dhcpcd-5.2.12-i486-2_slack13.1.txz Slackware x86_64 13.1 package: b2976c0bc824c53da33bdeaf5647c99b dhcpcd-5.2.12-x86_64-2_slack13.1.txz Slackware 13.37 package: e8fc381c5c5623c3d591ff06585da7f7 dhcpcd-5.2.12-i486-2_slack13.37.txz Slackware x86_64 13.37 package: fa7f9341a63b2568a78a812dcbe2a220 dhcpcd-5.2.12-x86_64-2_slack13.37.txz Slackware 14.0 package: cb9cb0030a700a664f9634cea787e1a3 dhcpcd-5.5.6-i486-2_slack14.0.txz Slackware x86_64 14.0 package: 830d0d7230297fb9d8e454acc0ff7a1c dhcpcd-5.5.6-x86_64-2_slack14.0.txz Slackware 14.1 package: 0016202a22b11a4741039f302a50a246 dhcpcd-6.0.5-i486-3_slack14.1.txz Slackware x86_64 14.1 package: 1999479013557ec1e3eca33c7c2f3927 dhcpcd-6.0.5-x86_64-3_slack14.1.txz Slackware -current package: 6f7335d0dace5432244dcbfbadce9053 n/dhcpcd-6.0.5-i486-3.txz Slackware x86_64 -current package: 4d0d4e0ae8876022729802e31a30f86c n/dhcpcd-6.0.5-x86_64-3.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg dhcpcd-6.0.5-i486-3_slack14.1.txz +-----+ . Recent updates to the dhcpcd packages in Slackware address a vulnerability that could lead to a denial of service. More information regarding the update is provided within.. dhcpcd packages, Slackware security, service disruption, package installation, security measures. . Severity: Critical. LinuxSecurity.com Team
Aug 01, 2014
•Critical
Slackware
91
security advisoryhigh severitygentooGentoo: GLSA-201301-04 High Risk: DHCPCD Remote Code Execution
A vulnerability has been found in dhcpcd, allowing remote attackers to execute arbitrary code on the DHCP client.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201301-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: dhcpcd: Arbitrary code execution Date: January 09, 2013 Bugs: #362459 ID: 201301-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= A vulnerability has been found in dhcpcd, allowing remote attackers to execute arbitrary code on the DHCP client. Background ========= dhcpcd is a fully featured, yet light weight RFC2131 compliant DHCP client. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-misc/dhcpcd < 5.2.12 > = 5.2.12 Description ========== A vulnerability has been discovered in dhcpcd. Please review the CVE identifier referenced below for details. Impact ===== The vulnerability might allow an attacker to execute arbitrary code on the DHCP client. Workaround ========= There is no known workaround at this time. Resolution ========= All dhcpcd users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =net-misc/dhcpcd-5.2.12" References ========= [ 1 ] CVE-2011-0996 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0996 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201301-04 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuringthe confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Jan 09, 2013
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!