CVE-2026-88833
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
58/100
Published: 2026-10-13
Modified: 2026-11-13
First seen: 2026-11-09
Status: active
Attack Surface
Adjacent
Low Complexity
No Auth
No Interaction
CVSS Vector Breakdown
AV:
Adjacent
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causing a subsequent memory copy with a massively oversized length. An attacker on the same network segment can send a specially crafted packet to crash the DHCP client, resulting in denial of service and loss of network connectivity.
Weakness Classification (1)
References & Advisories (3)
vendor-advisory
x_refsource_REDHAT