CVE-2005-1848 Memory corruption in n/a

Medium 5.0 Published Updated

Remote attackers can crash the dhcpcd daemon via an out-of-bounds memory read, causing a denial of service.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
Available

What is CVE-2005-1848?

CVE-2005-1848 is a medium-severity memory corruption vulnerability in n/a, published on 11 Jul 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors that cause an out-of-bounds memory read.

Which versions are affected by CVE-2005-1848?

It affects 1 product.

Products include Phystech Dhcpcd.

How do I fix CVE-2005-1848?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2005-1848 being exploited?

There is no known exploitation of CVE-2005-1848 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2005-1848, DSA-750-1, GHSA-xwxp-5m2x-m8vj.

Is CVE-2005-1848 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free