{"action":"Upgrade dhcpcd5 to 7.1.0-2 or later.","affected":[{"fixed":"7.1.0-2","introduced":"0"}],"component":"dhcpcd5","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["7.1.0-2"],"id":"tcs_01M5NDPEPPQ3AMF9H1BCHFKNTK","modified_at":"2026-09-21T07:00:23.739002689Z","published_at":"2019-04-28T16:29:00.530Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2019-11578","https://security-tracker.debian.org/tracker/CVE-2019-11578"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2019-11578","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2019-11578"}],"summary":"auth.c in dhcpcd before 7.2.1 allowed attackers to infer secrets by performing latency attacks."}