AZL-91710
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-91710.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-91710
- Upstream
- Published
- 2026-07-01T11:16:25Z
- Modified
- 2026-08-30T05:26:50Z
- Summary
- CVE-2026-14258 affecting package dhcpcd for versions less than 10.0.8-4
- Details
-
A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing. A specially crafted IPv6 Router Advertisement containing a zero-length Neighbor Discovery option can bypass validation during packet storage and later be reparsed without adequate validation, causing the parser to enter a non-advancing loop. Successful exploitation may result in excessive CPU consumption, leading to a denial of service.
- References