Candidate: CVE-2014-7912
PublicDate: 2015-07-30 00:59:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7912
 https://android.googlesource.com/platform/external/dhcpcd/+/73c09dd8067250734511d955d8f792b41c7213f0
 http://www.zerodayinitiative.com/advisories/ZDI-15-093/
Description:
 The get_option function in dhcp.c in dhcpcd before 6.2.0, as used in dhcpcd
 5.x in Android before 5.1 and other products, does not validate the
 relationship between length fields and the amount of data, which allows
 remote DHCP servers to execute arbitrary code or cause a denial of service
 (memory corruption) via a large length value of an option in a DHCPACK
 message.
Ubuntu-Description:
Notes:
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
CVSS: 

Patches_dhcpcd5:
 other: https://android.googlesource.com/platform/external/dhcpcd/+/73c09dd8067250734511d955d8f792b41c7213f0
upstream_dhcpcd5: released (6.9.0-1)
precise_dhcpcd5: ignored (reached end-of-life)
precise/esm_dhcpcd5: DNE (precise was needed)
trusty_dhcpcd5: ignored (reached end-of-life)
trusty/esm_dhcpcd5: DNE (trusty was needed)
vivid_dhcpcd5: ignored (reached end-of-life)
vivid/stable-phone-overlay_dhcpcd5: DNE
vivid/ubuntu-core_dhcpcd5: DNE
wily_dhcpcd5: not-affected (6.9.1-1)
xenial_dhcpcd5: not-affected (6.9.1-1)
yakkety_dhcpcd5: not-affected (6.9.1-1)
zesty_dhcpcd5: not-affected (6.9.1-1)
artful_dhcpcd5: not-affected (6.9.1-1)
bionic_dhcpcd5: not-affected (6.9.1-1)
cosmic_dhcpcd5: not-affected (6.9.1-1)
disco_dhcpcd5: not-affected (6.9.1-1)
devel_dhcpcd5: not-affected (6.9.1-1)

Patches_dhcpcd:
upstream_dhcpcd: needs-triage
precise_dhcpcd: ignored (reached end-of-life)
precise/esm_dhcpcd: DNE (precise was needs-triage)
trusty_dhcpcd: not-affected (code not present)
trusty/esm_dhcpcd: DNE (trusty was not-affected [code not present])
vivid_dhcpcd: ignored (reached end-of-life)
vivid/stable-phone-overlay_dhcpcd: DNE
vivid/ubuntu-core_dhcpcd: DNE
wily_dhcpcd: DNE
xenial_dhcpcd: DNE
yakkety_dhcpcd: DNE
zesty_dhcpcd: DNE
artful_dhcpcd: DNE
bionic_dhcpcd: DNE
cosmic_dhcpcd: DNE
disco_dhcpcd: DNE
devel_dhcpcd: DNE