A heap based buffer overflow was discovered in udhcpc when parsing IPv6 Rapid Deployment DHCP option. An attacker could send a maliciously crafted packet as an answer to a DHCP request, to overwrite the heap, resulting in crash or remote code execution. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2148
