dhclient 4.2.x Remote Code Execution

ISC dhclient does not strip or escape certain shell meta-characters in dhcpd responses, allowing a rogue server or party with with escalated privileges on the server to cause remote code execution on the client. Versions 3.0.x through 4.2.x are affected.

Source: dhclient 4.2.x Remote Code Execution