CVE-2012-6698
The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial...
The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds write) via a crafted response.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds write) via a crafted response.
- Record
CVE-2012-6698- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds write) via a crafted response.
- Record
CVE-2012-6698- Updated
- 2026-11-02
EUVDEUVD-2012-6540 No score
The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds write) via a crafted response.
- Record
EUVD-2012-6540- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f23j-rq7h-2f39
The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial...
The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds write) via a crafted response.
- Record
GHSA-f23j-rq7h-2f39- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
OSV
The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds write) via a crafted response.
- Record
CVE-2012-6698- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-6698
The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds write) via a crafted response.
- Record
DEBIAN-CVE-2012-6698- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVSUSE-SU-2015:2174-1 No score
Security update for dhcpcd
dhcpcd was updated to fix three security issues.
These security issues were fixed:
- CVE-2012-6698: A potential out of bounds write was fixed, which could lead to memory corruption, triggerable by network local attackers.
- CVE-2012-6699: A loop error was fixed that could lead out of bound reads, triggerable by network local attackers.
- CVE-2012-6700: An incorrect free could lead to crashes, triggerable by network local attackers.
- Record
SUSE-SU-2015:2174-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
dhcpcdDebian:13 |
before 1:10.0.1-1 | 1:10.0.1-1 |
dhcpcdDebian:14 |
before 1:10.0.1-1 | 1:10.0.1-1 |
dhcpcdDebian:6.0 |
before 1:3.2.3-5+squeeze2, plus listed versions 1:3.2.3-51:3.2.3-5+squeeze1 |
1:3.2.3-5+squeeze2 |
dhcpcdDebian:7 |
before 1:3.2.3-11+deb7u1, plus listed versions 1:3.2.3-11 |
1:3.2.3-11+deb7u1 |
dhcpcdSUSE:Linux Enterprise Desktop 11 SP3 |
before 3.2.3-45.5.3 | 3.2.3-45.5.3 |
dhcpcdSUSE:Linux Enterprise Desktop 11 SP4 |
before 3.2.3-45.5.3 | 3.2.3-45.5.3 |
dhcpcdSUSE:Linux Enterprise Server 11 SP2-LTSS |
before 3.2.3-45.5.3 | 3.2.3-45.5.3 |
dhcpcdSUSE:Linux Enterprise Server 11 SP3 |
before 3.2.3-45.5.3 | 3.2.3-45.5.3 |
dhcpcdSUSE:Linux Enterprise Server 11 SP3-TERADATA |
before 3.2.3-45.5.3 | 3.2.3-45.5.3 |
dhcpcdSUSE:Linux Enterprise Server for SAP Applications 11 SP3 |
before 3.2.3-45.5.3 | 3.2.3-45.5.3 |
dhcpcdSUSE:Linux Enterprise Server 11 SP4 |
before 3.2.3-45.5.3 | 3.2.3-45.5.3 |
dhcpcdSUSE:Linux Enterprise Server for SAP Applications 11 SP4 |
before 3.2.3-45.5.3 | 3.2.3-45.5.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-6698 is a high vulnerability (CVSS 7.5) in Dhcpcd Project Dhcpcd, published December 7, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.97%, the 80th percentile. Fixed in dhcpcd 1:10.0.1-1.