dhcpcd 10.3.0 NULL dereference in option parsing (CVE-2025-70102)
parse_option() in src/if-options.c follows a NULL dhcp_opt pointer while handling crafted configuration input.
3 stories, newest first · one card per story
parse_option() in src/if-options.c follows a NULL dhcp_opt pointer while handling crafted configuration input.
gf_isom_get_esd() crashes on near-NULL; fixed in commit e6d01820, CVSS 6.2.
BDU scores the availability-only crash CVSS 5.5; the fix is commit e02d1fd24cdc.
Today 1K readers · 1.5K views · 1.1K reads · all time 159K views