Packages / Debian 13 (Trixie) / net / udhcpd

Package: udhcpd (1:1.37.0-6)

Provides the busybox DHCP server implementation

Other Packages Related to udhcpd:

  • dep: [busybox] (>> 1:1.37.0)

    Tiny utilities for small and embedded systems

  • dep: [busybox-static] (>> 1:1.37.0)

    Standalone rescue shell with tons of builtin utilities

Download udhcpd

ArchitecturePackage sizeInstalled sizeFilesPackage
all13 KiB51 KiBlist of filesDownload

Rutas de archivos del paquete (0)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

No package-associated file paths were observed for the displayed build metadata.

Field source: Debian 13 (Trixie) main amd64

Usar este paquete

OpenFactory puede arrancar este sistema operativo en una máquina virtual del navegador, o iniciar una construcción que incluye el nombre nativo del paquete de este registro.

Versiones, suites y repositorios

Cada fila es metadato del índice de paquetes para una versión, arquitectura, suite y repositorio. Nombres, URL y tamaños vienen de la fuente; un enlace es un punto de descarga que puede cambiar, no una redistribución de OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1:1.37.0-6trixie / mainallDebian 13 · main · amd6413 KiB51 KiBpool/main/b/busybox/udhcpd_1.37.0-6_all.deb
1:1.37.0-6trixie / mainallDebian 13 · main · arm6413 KiB51 KiBpool/main/b/busybox/udhcpd_1.37.0-6_all.deb

Field source: Debian 13 (Trixie) main amd64

Vulnerabilidades conocidas

La asociación de paquetes está en curso.

CVEGravedadImpacto por versión
[CVE-2026-92205]

Published:

busybox: CVE-2026-92205

Medium(6.1)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 1:1.37.0-6 · all · trixie

    Afectada

    dsa · busybox · debian · 13

  • 1:1.37.0-6 · all · trixie

    Afectada

    dsa · busybox · debian · 13

[CVE-2026-90954]

Published:

A flaw was found in BusyBox's dpkg-deb archive extraction. The ar archive handler flushes deferred symlinks after each archive member, unlike the tar, cpio, and unzip handlers which flush once after t

High(7.8)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

[CVE-2026-88833]

Published:

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-vali

Medium(6.5)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

[CVE-2026-88830]

Published:

A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message.

High(8.1)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

[CVE-2026-88831]

Published:

BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients.

Medium(5.3)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

[CVE-2026-88832]

Published:

BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow when processing crafted filesystem images.

High(7.8)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

[CVE-2026-88835]

Published:

BusyBox dpkg read_package_field() steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read.

Medium(6.1)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

[CVE-2026-88837]

Published:

BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the authentication check.

Medium(6.5)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

[CVE-2026-88839]

Published:

BusyBox passwd/group tokenize() references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers.

Medium(6.7)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

[CVE-2026-88841]

Published:

busybox: CVE-2026-88841

Medium(4.4)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 1:1.37.0-6 · all · trixie

    Afectada

    dsa · busybox · debian · 13

  • 1:1.37.0-6 · all · trixie

    Afectada

    dsa · busybox · debian · 13

[CVE-2026-76014]

Published:

A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATURE_WGET_TIMEOUT Handler. Such manipulation of the ar

Medium(5.5)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

[CVE-2026-38752]

Published:

A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.

Medium(6.5)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

[CVE-2026-38753]

Published:

A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.

High(7.5)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

[CVE-2026-38754]

Published:

A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

High(7.5)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

[CVE-2026-38755]

Published:

A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

Medium(5.5)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

[CVE-2026-29004]

Published:

BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS option handler in networking/udhcp/d6_dhcpc.c that allows network-adjacent attack

High(8.8)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

  • 1:1.37.0-6 · all · trixie

    Afectada

    nvd · busybox · debian · 13

[CVE-2026-26157]

Published:

busybox: CVE-2026-26157

High(7)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 1:1.37.0-6 · all · trixie

    Afectada

    dsa · busybox · debian · 13

  • 1:1.37.0-6 · all · trixie

    Afectada

    dsa · busybox · debian · 13

[CVE-2026-26158]

Published:

busybox: CVE-2026-26158

High(7)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 1:1.37.0-6 · all · trixie

    Afectada

    dsa · busybox · debian · 13

  • 1:1.37.0-6 · all · trixie

    Afectada

    dsa · busybox · debian · 13

[CVE-2025-60876]

Published:

busybox: CVE-2025-60876

High(8)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 1:1.37.0-6 · all · trixie

    Afectada

    dsa · busybox · debian · 13

  • 1:1.37.0-6 · all · trixie

    Afectada

    dsa · busybox · debian · 13

[CVE-2024-58251]

Published:

busybox: CVE-2024-58251

Low(2.8)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 1:1.37.0-6 · all · trixie

    Afectada

    dsa · busybox · debian · 13

  • 1:1.37.0-6 · all · trixie

    Afectada

    dsa · busybox · debian · 13

[Más resultados]

Última sincronización:

[Catálogo de CVE]

Sumas de comprobación

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1:1.37.0-6 / allObservado Sep 1, 2026sha256 61b99f0f520c…f1476ae3Resumen de la fuente

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumen de la fuente (sha256): 61b99f0f520c5edabf90974671918bf6f64213855747eff6e49389a4f1476ae3

Verificar descarga

printf '%s %s\n' '61b99f0f520c5edabf90974671918bf6f64213855747eff6e49389a4f1476ae3' 'udhcpd_1.37.0-6_all.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

1:1.37.0-6 / allObservado Sep 1, 2026sha256 61b99f0f520c…f1476ae3Resumen de la fuente

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumen de la fuente (sha256): 61b99f0f520c5edabf90974671918bf6f64213855747eff6e49389a4f1476ae3

Verificar descarga

printf '%s %s\n' '61b99f0f520c5edabf90974671918bf6f64213855747eff6e49389a4f1476ae3' 'udhcpd_1.37.0-6_all.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

Fuentes

  • Authoritative source; repository metadata signature verified

    Prueba de firma

    trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Prueba de firma

    trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result
    match verified