Cyber ·
CVE-2025-70102: NULL pointer dereference in dhcpcd configuration option processing
Advisory on CWE-476 in dhcpcd 10.3.0: a specially crafted configuration entry makes parse_option access members of a NULL pointer. Published on the oss-sec list on October 30.
The advisory, published on the oss-sec list on October 30, describes CVE-2025-70102 in dhcpcd, a DHCP client used on Unix and Linux systems. According to the source, when processing a configuration entry crafted to exploit the flaw, the parse_option function in src/if-options.c accesses members of a NULL struct dhcp_opt pointer. The classification is CWE-476, NULL pointer dereference. The affected version cited is 10.3.0, and the condition was reproduced on commit 2de751b3691642151a4fdc49e444d6b4dc364e98. The affected branch tests ldop, a pointer to the option; the text received is truncated, and the source does not detail any impact beyond this dereference. For an organization, the practical step is to inventory where dhcpcd runs, check whether the version falls in the affected range, and apply the fix published by the vendor or project. Rota Nacional does not fix this software or replace the patch, since it does not act on the network or operating system. The original text is an automatic translation, so verify details in the original advisory and the project's official notes.