CVE-2026-56116

Name
CVE-2026-56116
Description
dhcpcd through 10.3.2, fixed in commit 708b4a5, contains a memory leak vulnerability in the IPv6 Router Advertisement route information handling that allows an unauthenticated same-link attacker to cause denial of service by sending crafted Router Advertisements. Attackers can repeatedly send Router Advertisements containing Route Information options with a lifetime of zero, triggering unfreed allocations in routeinfo_findalloc() that cause linear memory exhaustion and eventual daemon crash.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
disclosure@vulncheck.com https://github.com/NetworkConfiguration/dhcpcd/commit/708b4a56bae080a5b18c2e0c4c6fbe103131a2b0
disclosure@vulncheck.com https://www.vulncheck.com/advisories/dhcpcd-memory-leak-dos-via-ipv6-router-advertisement-handling

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:dhcpcd_project:dhcpcd:*:*:*:*:*:*:*:* dhcpcd >= None <= 10.3.2

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
dhcpcd edge-main 10.3.2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
dhcpcd edge-main 10.3.0-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
dhcpcd edge-main 10.2.4-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
dhcpcd edge-main 10.2.3-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
dhcpcd edge-main 10.2.2-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
dhcpcd edge-main 10.2.2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
dhcpcd edge-main 10.2.0-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
dhcpcd edge-main 10.1.0-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
dhcpcd edge-main 10.1.0-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
dhcpcd 3.24-main 10.3.2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
dhcpcd 3.23-main 10.3.0-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
dhcpcd 3.22-main 10.2.3-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
dhcpcd 3.21-main 10.1.0-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
dhcpcd 3.21-main 10.1.0-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
dhcpcd 3.20-main 10.0.6-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
dhcpcd 3.20-main 10.0.6-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
dhcpcd 3.19-main 10.0.5-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable