CVE-2026-14258

A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing. A specially crafted IPv6 Router Advertisement containing a zero-length Neighbor Discovery option can bypass validation during packet storage and later be reparsed without adequate validation, causing the parser to enter a non-advancing loop. Successful exploitation may result in excessive CPU consumption, leading to a denial of service.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://access.redhat.com/errata/RHSA-2026:54210
https://access.redhat.com/security/cve/CVE-2026-14258
https://bugzilla.redhat.com/show_bug.cgi?id=2462305
https://github.com/NetworkConfiguration/dhcpcd/commit/75289ca
https://github.com/NetworkConfiguration/dhcpcd/issues/415
https://github.com/NetworkConfiguration/dhcpcd/issues/415

Configurations

No configuration.

History

25 Oct 2026, 17:10

Type	Values Removed	Values Added
Summary		(es) Se encontró una falla en el procesamiento de anuncios de router de descubrimiento de vecinos IPv6 de dhcpcd. Un anuncio de router IPv6 especialmente diseñado que contiene una opción de descubrimiento de vecinos de longitud cero puede eludir la validación durante el almacenamiento de paquetes y luego ser reanalizado sin validación adecuada, haciendo que el analizador entre en un bucle sin avance. La explotación exitosa puede resultar en un consumo excesivo de CPU, lo que lleva a una denegación de servicio.

Information

Published : 2026-07-01 11:16

Updated : 2026-10-25 17:10

NVD link : CVE-2026-14258

Mitre link : CVE-2026-14258

CVE.ORG link : CVE-2026-14258

JSON object : View

Products Affected

No product.

CWE

CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

{"id": "CVE-2026-14258", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-14258", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-01T12:20:39.579180Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "secalert@redhat.com", "affectedData": [{"cpes": ["cpe:/o:redhat:enterprise_linux:10.2"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "versions": [{"status": "unaffected", "version": "0:10.0.6-11.el10_2", "lessThan": "*", "versionType": "rpm"}], "packageName": "dhcpcd", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}]}], "published": "2026-07-01T11:16:25.980", "references": [{"url": "https://access.redhat.com/errata/RHSA-2026:54210", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/security/cve/CVE-2026-14258", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2462305", "source": "secalert@redhat.com"}, {"url": "https://github.com/NetworkConfiguration/dhcpcd/commit/75289ca", "source": "secalert@redhat.com"}, {"url": "https://github.com/NetworkConfiguration/dhcpcd/issues/415", "source": "secalert@redhat.com"}, {"url": "https://github.com/NetworkConfiguration/dhcpcd/issues/415", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-835"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing. A specially crafted IPv6 Router Advertisement containing a zero-length Neighbor Discovery option can bypass validation during packet storage and later be reparsed without adequate validation, causing the parser to enter a non-advancing loop. Successful exploitation may result in excessive CPU consumption, leading to a denial of service."}, {"lang": "es", "value": "Se encontr\u00f3 una falla en el procesamiento de anuncios de router de descubrimiento de vecinos IPv6 de dhcpcd. Un anuncio de router IPv6 especialmente dise\u00f1ado que contiene una opci\u00f3n de descubrimiento de vecinos de longitud cero puede eludir la validaci\u00f3n durante el almacenamiento de paquetes y luego ser reanalizado sin validaci\u00f3n adecuada, haciendo que el analizador entre en un bucle sin avance. La explotaci\u00f3n exitosa puede resultar en un consumo excesivo de CPU, lo que lleva a una denegaci\u00f3n de servicio."}], "lastModified": "2026-10-25T17:10:00.197", "sourceIdentifier": "secalert@redhat.com"}