This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2019-11766 →
DEBIAN-CVE-2019-11766
dhcp6.c in dhcpcd before 6.11.7 and 7.x before 7.2.2 has a buffer over-read in the D6_OPTION_PD_EXCLUDE feature.
Original description
The description as published by the source.
dhcp6.c in dhcpcd before 6.11.7 and 7.x before 7.2.2 has a buffer over-read in the D6_OPTION_PD_EXCLUDE feature.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
dhcpcd5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.0-2"}]}]
References
- advisory security-tracker.debian.org