CVE-2026-14258

{
  "id": "CVE-2026-14258",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-01T11:16:25.980",
  "lastModified": "2026-10-25T17:10:00.197",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing. A specially crafted IPv6 Router Advertisement containing a zero-length Neighbor Discovery option can bypass validation during packet storage and later be reparsed without adequate validation, causing the parser to enter a non-advancing loop. Successful exploitation may result in excessive CPU consumption, leading to a denial of service."
    },
    {
      "lang": "es",
      "value": "Se encontró una falla en el procesamiento de anuncios de router de descubrimiento de vecinos IPv6 de dhcpcd. Un anuncio de router IPv6 especialmente diseñado que contiene una opción de descubrimiento de vecinos de longitud cero puede eludir la validación durante el almacenamiento de paquetes y luego ser reanalizado sin validación adecuada, haciendo que el analizador entre en un bucle sin avance. La explotación exitosa puede resultar en un consumo excesivo de CPU, lo que lleva a una denegación de servicio."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 10",
          "defaultStatus": "affected",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "packageName": "dhcpcd",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "versions": [
            {
              "version": "0:10.0.6-11.el10_2",
              "lessThan": "*",
              "versionType": "rpm",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "ADJACENT_NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-01T12:20:39.579180Z",
          "id": "CVE-2026-14258",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-835"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://access.redhat.com/errata/RHSA-2026:54210",
      "source": "[email protected]"
    },
    {
      "url": "https://access.redhat.com/security/cve/CVE-2026-14258",
      "source": "[email protected]"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2462305",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/NetworkConfiguration/dhcpcd/commit/75289ca",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/NetworkConfiguration/dhcpcd/issues/415",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/NetworkConfiguration/dhcpcd/issues/415",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}