By vendor

Dhcpcd_project vulnerabilities

Known CVEs affecting Dhcpcd_project products, prioritized by severity, with SEC.co remediation and detection guidance.

4 published vulnerabilities

• CVE-2026-56116MEDIUM 6.5

  dhcpcd, a widely-used DHCP client daemon on Unix-like systems, contains a memory leak flaw in how it processes IPv6 Router Advertisements. An attacker on the same network link can repeatedly send specially crafted Router Advertisements to exhaust the daemon's memory, eventually crashing it and disrupting network connectivity. The attacker needs no credentials and the traffic stays local to the link, making this a concern primarily for shared networks or systems where untrusted devices can reach the same link segment.

• CVE-2026-56113MEDIUM 5.3

  dhcpcd, a widely-used DHCP client daemon, contains a memory safety bug that can be triggered by a malicious DHCPv6 server on the same network. An attacker who can send a specially crafted DHCPv6 renewal message can cause dhcpcd to crash. The vulnerability exists in how dhcpcd manages IPv6 address delegation—specifically when an attacker sets both lifetime values to zero in a prefix delegation exclusion option. Versions through 10.3.2 are affected; the fix is available in commit 5733d3c and later releases.

• CVE-2026-56114MEDIUM 5.3

  dhcpcd, a widely-used DHCP client for Unix-like systems, contains a stack memory vulnerability that can be triggered by an attacker on the same network segment. An attacker can send a specially crafted DHCPv6 advertisement message that causes dhcpcd to write one byte past the boundary of an internal buffer. While this is a limited write (one byte), it occurs on the stack and can corrupt adjacent memory structures, potentially leading to a denial of service. The vulnerability affects dhcpcd versions up to 10.3.2 and has been fixed in a subsequent commit.

• CVE-2026-56117MEDIUM 4.7

  dhcpcd, a widely deployed DHCP client daemon, contains a memory safety bug that can crash the service when privilege separation is disabled. A local user on the same system can exploit this by sending a specially crafted command to dhcpcd's control socket, causing the daemon to reference memory it has already freed. While the vulnerability requires local access and a specific configuration, it represents a denial-of-service risk in environments where dhcpcd runs with privilege separation turned off—a configuration sometimes found in embedded systems or minimal deployments.