—
GO-2026-6237
Denial of service via malformed IPv4 packet in github.com/insomniacslk/dhcp
Quick fix
GO-2026-6237 — github.com/insomniacslk/dhcp: upgrade to the fixed version with the command below.
go get github.com/insomniacslk/dhcp@v0.0.0-20260719225207-c76316d4aa82Details
In github.com/insomniacslk/dhcp/dhcpv4/nclient4, BroadcastRawUDPConn.ReadFrom does not validate that the IPv4 payload length is sufficient to hold a UDP header before calculating the DHCP payload length. A frame with an IPv4 total-length field specifying fewer than eight payload bytes results in a negative DHCP length, causing a panic in buf.Consume due to a negative slice bound.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/insomniacslk/dhcp
Introduced in:
0 Fixed in: 0.0.0-20260719225207-c76316d4aa82 Fix
go get github.com/insomniacslk/dhcp@v0.0.0-20260719225207-c76316d4aa82