CVE-2011-2717: Linux DHCP6C

Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days.

The DHCPv6 client (dhcp6c) as used in the dhcpv6 project through 2011-07-25 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message.

Affected products

• Linux DHCP6C: up to and including 2011-07-25
• Red Hat Enterprise Linux: version 4.0 only; version 5.0 only

Published 2019-11-27. Last modified 2026-06-16.