dhcpcd 10.3.0 NULL dereference in option parsing (CVE-2025-70102)
Original title: CVE-2025-70102: dhcpcd: NULL Pointer Dereference in Configuration Option Parsing
parse_option() in src/if-options.c follows a NULL dhcp_opt pointer while handling crafted configuration input.
Alexander A. Shvedov reported CVE-2025-70102, a NULL pointer dereference in dhcpcd. The CVE description identifies version 10.3.0, and the reporter reproduced it at commit 2de751b3691642151a4fdc49e444d6b4dc364e98. While processing crafted configuration input, parse_option() in src/if-options.c accesses members of a NULL struct dhcp_opt pointer. The posted description is cut off after mentioning a branch that tests ldop.
Unconfirmed: The feed snippet is cut off and does not state impact beyond the NULL dereference or whether a fix exists.
- CWE-476 NULL Pointer Dereference.
- Affected version stated as dhcpcd 10.3.0.
- Reproduced at commit 2de751b3691642151a4fdc49e444d6b4dc364e98.
- The oss-security post does not state a fixed version.
Impact: NULL pointer dereference while parsing configuration options
| Product | Affected |
|---|---|
| dhcpcd | 10.3.0 |
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-70102 | A NULL pointer dereference occurs in Roy Marples NetworkConfiguration/dhcpcd 10.3.0 while parsing configuration options | 6.3 | <1% |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| sha1 | 2de751b3691642151a4fdc49e444d6b4dc364e98 | as identified in the CVE description; reproduced at commit 2de751b3691642151a4fdc49e444d6b4dc364e98 CWE: CWE-476 (NULL Pointer Dereference) Reporter: Alexander |
From the original article
Posted by Alexander A. Shvedov on Oct 30 Product: dhcpcd Affected: 10. 3.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.