VULNERABILITY INTELLIGENCE
CVE-2009-0692
CVSS score10 HIGH
EPSS probability25.78%
CISA KEVNot currently listed
Published2009-07-14
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer