CVE-2012-2152

HIGH 7.5CVE-2012-2152 · Published 25/07/2012 · updated 16/06/2026

In short

CVE-2012-2152 is a HIGH (CVSS 7.5) vulnerability affecting dhcpcd (roy marples).
Chance of exploitation in the next 30 days (EPSS): 4.0%, higher than 90.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
dhcpcd roy_marples	`= 3.2.3`	No fix yet

Description

Stack-based buffer overflow in the get_packet method in socket.c in dhcpcd 3.2.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long packet.

References

debian.org/security/2012/dsa-2498
openwall.com/lists/oss-security/2012/05/02/4
openwall.com/lists/oss-security/2012/05/02/5
securityfocus.com/bid/53354
bugzilla.novell.com/show_bug.cgi

More vulnerabilities in dhcpcd

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free