dhcp6.c in dhcpcd before 6.11.7 and 7.x before 7.2.2 has a buffer over-read in the D6_OPTION_PD_EXCLUDE feature.

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

• Debian DEBIAN-CVE-2019-11766 dhcpcd5 Fixed in: 7.1.0-2

References

• patch bugs.debian.org
• patch roy.marples.name
• patch roy.marples.name
• patch roy.marples.name
• web securityfocus.com