Packages / Debian 12 (Bookworm) / net / udhcpd

Package: udhcpd (1:1.35.0-4+deb12u1+b1)

Provides the busybox DHCP server implementation

Other Packages Related to udhcpd:

dep: [busybox] (>> 1:1.35.0)
Tiny utilities for small and embedded systems
dep: [busybox-static] (>> 1:1.35.0)
Standalone rescue shell with tons of builtin utilities
dep: [lsb-base]
transitional package for Linux Standard Base init script functionality

Download udhcpd

Architecture	Package size	Installed size	Files	Package
amd64	9.1 KiB	39 KiB	list of files	Download
arm64	9.1 KiB	39 KiB	list of files	Download

Rutas de archivos del paquete (12)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/etc/default/udhcpd
/etc/init.d/udhcpd
/etc/udhcpd.conf
/usr/bin/dumpleases
/usr/sbin/udhcpd
/usr/share/doc/udhcpd/changelog.Debian.amd64.gz
/usr/share/doc/udhcpd/changelog.Debian.arm64.gz
/usr/share/doc/udhcpd/changelog.Debian.gz
/usr/share/doc/udhcpd/copyright
/usr/share/man/man1/dumpleases.1.gz
/usr/share/man/man5/udhcpd.conf.5.gz
/usr/share/man/man8/udhcpd.8.gz

Field source: Debian 12 (Bookworm) main amd64

Usar este paquete

OpenFactory puede arrancar este sistema operativo en una máquina virtual del navegador, o iniciar una construcción que incluye el nombre nativo del paquete de este registro.

Probar Debian 12 (Bookworm) en el navegador Construir una imagen que incluye udhcpd

Versiones, suites y repositorios

Cada fila es metadato del índice de paquetes para una versión, arquitectura, suite y repositorio. Nombres, URL y tamaños vienen de la fuente; un enlace es un punto de descarga que puede cambiar, no una redistribución de OpenFactory.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
1:1.35.0-4+deb12u1+b1	bookworm / main	amd64	Debian 12 · main · amd64	9.1 KiB	39 KiB	pool/main/b/busybox/udhcpd_1.35.0-4+deb12u1+b1_amd64.deb
1:1.35.0-4+deb12u1+b1	bookworm / main	arm64	Debian 12 · main · arm64	9.1 KiB	39 KiB	pool/main/b/busybox/udhcpd_1.35.0-4+deb12u1+b1_arm64.deb

Field source: Debian 12 (Bookworm) main amd64

Vulnerabilidades conocidas

La asociación de paquetes está en curso.

CVE	Gravedad	Impacto por versión
[CVE-2026-92205] Published: Oct 21, 2026, 5:17:22 PM UTC busybox: CVE-2026-92205	Medium(6.1)	Desconocido Detalles (2) `1:1.35.0-4+deb12u1+b1` · amd64 · bookworm Desconocido Version impact unknown dsa · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14 `1:1.35.0-4+deb12u1+b1` · arm64 · bookworm Desconocido Version impact unknown dsa · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14
[CVE-2026-88829] Published: Oct 14, 2026, 8:00:00 AM UTC A flaw was found in BusyBox httpd's reverse proxy feature. When the proxy is configured to forward requests matching a URL prefix to a backend server, only the first HTTP request on a TCP connection h	High(7.2)	Desconocido Detalles (2) `1:1.35.0-4+deb12u1+b1` · amd64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm `1:1.35.0-4+deb12u1+b1` · arm64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm
[CVE-2026-90954] Published: Oct 14, 2026, 8:00:00 AM UTC A flaw was found in BusyBox's dpkg-deb archive extraction. The ar archive handler flushes deferred symlinks after each archive member, unlike the tar, cpio, and unzip handlers which flush once after t	High(7.8)	Desconocido Detalles (2) `1:1.35.0-4+deb12u1+b1` · amd64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14 `1:1.35.0-4+deb12u1+b1` · arm64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14
[CVE-2026-88838] Published: Oct 13, 2026, 1:50:19 PM UTC A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /etc/fstab by specifying clearing-mask options on the command line. These options pass the no	Medium(5.5)	Desconocido Detalles (2) `1:1.35.0-4+deb12u1+b1` · amd64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm `1:1.35.0-4+deb12u1+b1` · arm64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm
[CVE-2026-88834] Published: Oct 13, 2026, 1:49:55 PM UTC A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attacker could distinguish ex	Low(3.7)	Desconocido Detalles (2) `1:1.35.0-4+deb12u1+b1` · amd64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm `1:1.35.0-4+deb12u1+b1` · arm64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm
[CVE-2026-88833] Published: Oct 13, 2026, 1:49:21 PM UTC A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-vali	Medium(6.5)	Desconocido Detalles (2) `1:1.35.0-4+deb12u1+b1` · amd64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14 `1:1.35.0-4+deb12u1+b1` · arm64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14
[CVE-2026-88842] Published: Oct 12, 2026, 5:14:28 PM UTC A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is l	Low(3.3)	Desconocido Detalles (2) `1:1.35.0-4+deb12u1+b1` · amd64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm `1:1.35.0-4+deb12u1+b1` · arm64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm
[CVE-2026-108119] Published: Oct 9, 2026, 3:31:42 PM UTC A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not validate that the resolved destination remains insid	Medium(6.3)	Desconocido Detalles (2) `1:1.35.0-4+deb12u1+b1` · amd64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm `1:1.35.0-4+deb12u1+b1` · arm64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm
[CVE-2026-88830] Published: Sep 23, 2026, 4:35:00 PM UTC A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message.	High(8.1)	Desconocido Detalles (2) `1:1.35.0-4+deb12u1+b1` · amd64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14 `1:1.35.0-4+deb12u1+b1` · arm64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14
[CVE-2026-88831] Published: Sep 23, 2026, 4:35:00 PM UTC BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients.	Medium(5.3)	Desconocido Detalles (2) `1:1.35.0-4+deb12u1+b1` · amd64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14 `1:1.35.0-4+deb12u1+b1` · arm64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14
[CVE-2026-88832] Published: Sep 23, 2026, 4:35:00 PM UTC BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow when processing crafted filesystem images.	High(7.8)	Desconocido Detalles (2) `1:1.35.0-4+deb12u1+b1` · amd64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14 `1:1.35.0-4+deb12u1+b1` · arm64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14
[CVE-2026-88835] Published: Sep 23, 2026, 4:35:00 PM UTC BusyBox dpkg read_package_field() steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read.	Medium(6.1)	Desconocido Detalles (2) `1:1.35.0-4+deb12u1+b1` · amd64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14 `1:1.35.0-4+deb12u1+b1` · arm64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14
[CVE-2026-88837] Published: Sep 23, 2026, 4:35:00 PM UTC BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the authentication check.	Medium(6.5)	Desconocido Detalles (2) `1:1.35.0-4+deb12u1+b1` · amd64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14 `1:1.35.0-4+deb12u1+b1` · arm64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14
[CVE-2026-88839] Published: Sep 23, 2026, 4:35:00 PM UTC BusyBox passwd/group tokenize() references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers.	Medium(6.7)	Desconocido Detalles (2) `1:1.35.0-4+deb12u1+b1` · amd64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14 `1:1.35.0-4+deb12u1+b1` · arm64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14
[CVE-2026-88840] Published: Sep 23, 2026, 4:35:00 PM UTC BusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated ClientHello message.	Medium(5.3)	Desconocido Detalles (2) `1:1.35.0-4+deb12u1+b1` · amd64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 14 `1:1.35.0-4+deb12u1+b1` · arm64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 14
[CVE-2026-88841] Published: Sep 23, 2026, 4:35:00 PM UTC busybox: CVE-2026-88841	Medium(4.4)	Desconocido Detalles (2) `1:1.35.0-4+deb12u1+b1` · amd64 · bookworm Desconocido Version impact unknown dsa · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14 `1:1.35.0-4+deb12u1+b1` · arm64 · bookworm Desconocido Version impact unknown dsa · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14
[CVE-2026-76014] Published: Aug 18, 2026, 10:00:00 PM UTC A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATURE_WGET_TIMEOUT Handler. Such manipulation of the ar	Medium(5.5)	Desconocido Detalles (2) `1:1.35.0-4+deb12u1+b1` · amd64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14 `1:1.35.0-4+deb12u1+b1` · arm64 · bookworm Desconocido Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14
[CVE-2026-38752] Published: Jul 15, 2026, 12:00:00 AM UTC A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.	Medium(6.5)	Desconocido Detalles (2) `1:1.35.0-4+deb12u1+b1` · amd64 · bookworm Desconocido · Corregida: `1:1.38.0-3` Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14 `1:1.35.0-4+deb12u1+b1` · arm64 · bookworm Desconocido · Corregida: `1:1.38.0-3` Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14
[CVE-2026-38753] Published: Jul 15, 2026, 12:00:00 AM UTC A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.	High(7.5)	Desconocido Detalles (2) `1:1.35.0-4+deb12u1+b1` · amd64 · bookworm Desconocido · Corregida: `1:1.38.0-3` Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14 `1:1.35.0-4+deb12u1+b1` · arm64 · bookworm Desconocido · Corregida: `1:1.38.0-3` Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14
[CVE-2026-38754] Published: Jul 15, 2026, 12:00:00 AM UTC A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.	High(7.5)	Desconocido Detalles (2) `1:1.35.0-4+deb12u1+b1` · amd64 · bookworm Desconocido · Corregida: `1:1.38.0-3` Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14 `1:1.35.0-4+deb12u1+b1` · arm64 · bookworm Desconocido · Corregida: `1:1.38.0-3` Version impact unknown nvd · busybox · debian · bookworm; pypi · busybox · debian · 12; pypi · busybox · debian · 13; pypi · busybox · debian · 14

[Más resultados]

Última sincronización: Oct 29, 2026, 10:41:25 AM UTC

[Catálogo de CVE]

Sumas de comprobación

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1:1.35.0-4+deb12u1+b1 / amd64Observado Sep 1, 2026sha256 9687c46353d1…4f105ac2Resumen de la fuente

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumen de la fuente (sha256): 9687c46353d1f721b2b74a00c9c2afc301a16c07f9cfb73c7dbba4314f105ac2

Verificar descarga

printf '%s  %s\n' '9687c46353d1f721b2b74a00c9c2afc301a16c07f9cfb73c7dbba4314f105ac2' 'udhcpd_1.35.0-4+deb12u1+b1_amd64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main amd64

1:1.35.0-4+deb12u1+b1 / arm64Observado Sep 1, 2026sha256 513291f23b10…b2bb2df9Resumen de la fuente

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumen de la fuente (sha256): 513291f23b10a415b3be82afbf7ea907f07cd8e049c553fba11c7bd3b2bb2df9

Verificar descarga

printf '%s  %s\n' '513291f23b10a415b3be82afbf7ea907f07cd8e049c553fba11c7bd3b2bb2df9' 'udhcpd_1.35.0-4+deb12u1+b1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main arm64

Fuentes

Debian 12 (Bookworm) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prueba de firma
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Observed SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Result
match verified
Debian 12 (Bookworm) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prueba de firma
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Observed SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Result
match verified