Approved changes feed: RSS · Atom

cpe:2.3:a:dhcpcd_project:dhcpcd:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDhcpcd Project (d3b067ef-4e3b-50ad-a713-94b33092d4fb)
ProductDhcpcd (08769bf6-3e74-52f3-9809-ad99a2701f54)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/dhcpcd5 purl2cpe 2026-06-01 10:11:14.427251
pkg:deb/ubuntu/dhcpcd5 purl2cpe 2026-06-01 10:11:14.427254
pkg:github/networkconfiguration/dhcpcd purl2cpe 2026-06-01 10:11:14.427256
pkg:rpm/fedora/dhcpcd purl2cpe 2026-06-01 10:11:14.427259

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-11766 vulnerable 2026-06-08 05:12:38.076072 Details available
dhcp6.c in dhcpcd before 6.11.7 and 7.x before 7.2.2 has a buffer over-read in the D6_OPTION_PD_EXCLUDE feature.
Published: 2019-05-05T05:18:14.000Z
Updated: 2024-08-04T23:03:32.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11579 vulnerable 2026-06-08 05:12:37.683009 Details available
dhcp.c in dhcpcd before 7.2.1 contains a 1-byte read overflow with DHO_OPTSOVERLOADED.
Published: 2019-04-28T15:22:37.000Z
Updated: 2024-08-04T22:55:40.906Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11578 vulnerable 2026-06-08 05:12:37.682529 Details available
auth.c in dhcpcd before 7.2.1 allowed attackers to infer secrets by performing latency attacks.
Published: 2019-04-28T15:22:24.000Z
Updated: 2024-08-04T22:55:41.047Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11577 vulnerable 2026-06-08 05:12:37.680321 Details available
dhcpcd before 7.2.1 contains a buffer overflow in dhcp6_findna in dhcp6.c when reading NA/TA addresses.
Published: 2019-04-28T15:22:10.000Z
Updated: 2024-08-04T22:55:41.065Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1504 vulnerable 2026-06-08 05:07:31.649132 Details available
dhcpcd before 6.10.0 allows remote attackers to cause a denial of service (invalid read and crash) via vectors related to the option length.
Published: 2017-02-07T15:00:00.000Z
Updated: 2024-08-05T22:55:14.831Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1503 vulnerable 2026-06-08 05:07:31.645010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7913 vulnerable 2026-06-08 05:06:00.428034 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7912 vulnerable 2026-06-08 05:06:00.427604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.