{"action":"Upgrade dhcpcd5 to 7.1.0-2 or later.","affected":[{"fixed":"7.1.0-2","introduced":"0"}],"component":"dhcpcd5","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["7.1.0-2"],"id":"tcs_01M5NDQCH1PF2KH8R6QF9MB58J","modified_at":"2026-09-21T07:00:37.794913097Z","published_at":"2019-05-05T06:29:00.223Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2019-11766","https://security-tracker.debian.org/tracker/CVE-2019-11766"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2019-11766","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2019-11766"}],"summary":"dhcp6.c in dhcpcd before 6.11.7 and 7.x before 7.2.2 has a buffer over-read in the D6_OPTION_PD_EXCLUDE feature."}