CVE-2016-1504 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 82%

Vendor	Product	Version
dhcpcd_project	dhcpcd	𝑥 ≤ 6.9.4

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

dhcpcd

sid	1:10.1.0-1 fixed
trixie	1:10.1.0-1 fixed
jessie	not-affected
wheezy	not-affected
squeeze	not-affected

dhcpcd5

bullseye	7.1.0-2 fixed
jessie	not-affected
wheezy	not-affected
squeeze	not-affected
bookworm	9.4.1-24~deb12u4 fixed

Ubuntu Releases

Ubuntu Product

Codename

dhcpcd

noble	not-affected
mantic	not-affected
lunar	dne
kinetic	dne
jammy	dne
focal	dne
disco	dne
cosmic	dne
bionic	dne
artful	dne
zesty	dne
yakkety	dne
xenial	dne
wily	dne
vivid	ignored
trusty	dne
precise	ignored

dhcpcd5

noble	dne
mantic	dne
lunar	not-affected
kinetic	not-affected
jammy	not-affected
focal	not-affected
disco	not-affected
cosmic	not-affected
bionic	not-affected
artful	not-affected
zesty	not-affected
yakkety	not-affected
xenial	not-affected
wily	ignored
vivid	ignored
trusty	needed
precise	ignored

Common Weakness Enumeration

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

References

http://roy.marples.name/projects/dhcpcd/info/595883e2a431f65d8fabf33059aa4689cca17403

http://roy.marples.name/projects/dhcpcd/timeline?r=trunk&nd&c=2016-01-07+16%3A47%3A19&n=200

http://www.openwall.com/lists/oss-security/2016/01/07/3

http://www.openwall.com/lists/oss-security/2016/01/07/4

http://www.securitytracker.com/id/1034601

https://security.gentoo.org/glsa/201606-07

http://roy.marples.name/projects/dhcpcd/info/595883e2a431f65d8fabf33059aa4689cca17403

http://roy.marples.name/projects/dhcpcd/timeline?r=trunk&nd&c=2016-01-07+16%3A47%3A19&n=200

http://www.openwall.com/lists/oss-security/2016/01/07/3

http://www.openwall.com/lists/oss-security/2016/01/07/4

http://www.securitytracker.com/id/1034601

https://security.gentoo.org/glsa/201606-07