VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 30, 2015· Updated Jun 17, 2026

CVE-2014-7912

CVE-2014-7912

Description

The get_option function in dhcp.c in dhcpcd before 6.2.0, as used in dhcpcd 5.x in Android before 5.1 and other products, does not validate the relationship between length fields and the amount of data, which allows remote DHCP servers to execute arbitrary code or cause a denial of service (memory corruption) via a large length value of an option in a DHCPACK message.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Dhcpcd Project/Dhcpcd2 versions
    cpe:2.3:a:dhcpcd_project:dhcpcd:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:dhcpcd_project:dhcpcd:*:*:*:*:*:*:*:*range: <=6.1.0
    • (no CPE)range: <6.2.0
  • Google/Androidllm-fuzzy
    Range: <5.1

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.