Red Hat Security Advisory

RHSA-2011:0428

dhcp security update

Released 2011-04-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5.6.z server) dhclient-12:3.0.5-23.el5_6.4, dhclient-12:3.0.5-23.el5_6.4.i386, dhclient-12:3.0.5-23.el5_6.4.ia64 +17
Red Hat Enterprise Linux AS version 4 dhclient-7:3.0.1-67.el4, dhclient-7:3.0.1-67.el4.i386, dhclient-7:3.0.1-67.el4.ia64 +9
Red Hat Enterprise Linux Desktop (v. 6) dhclient-12:4.1.1-12.P1.el6_0.4, dhcp-12:4.1.1-12.P1.el6_0.4
Red Hat Enterprise Linux Desktop Optional (v. 6) dhcp-12:4.1.1-12.P1.el6_0.4, dhcp-devel-12:4.1.1-12.P1.el6_0.4
Red Hat Enterprise Linux Desktop version 4 dhclient-7:3.0.1-67.el4, dhclient-7:3.0.1-67.el4.i386, dhcp-7:3.0.1-67.el4 +3
Red Hat Enterprise Linux ES version 4 dhclient-7:3.0.1-67.el4, dhclient-7:3.0.1-67.el4.i386, dhclient-7:3.0.1-67.el4.ia64 +6
Red Hat Enterprise Linux HPC Node (v. 6) dhclient-12:4.1.1-12.P1.el6_0.4, dhcp-12:4.1.1-12.P1.el6_0.4
Red Hat Enterprise Linux HPC Node Optional (v. 6) dhcp-12:4.1.1-12.P1.el6_0.4, dhcp-devel-12:4.1.1-12.P1.el6_0.4
Red Hat Enterprise Linux Server (v. 6) dhclient-12:4.1.1-12.P1.el6_0.4, dhcp-12:4.1.1-12.P1.el6_0.4
Red Hat Enterprise Linux Server Optional (v. 6) dhcp-12:4.1.1-12.P1.el6_0.4, dhcp-devel-12:4.1.1-12.P1.el6_0.4, dhcp-devel-12:4.1.1-12.P1.el6_0.4.ppc
Red Hat Enterprise Linux WS version 4 dhclient-7:3.0.1-67.el4, dhclient-7:3.0.1-67.el4.i386, dhclient-7:3.0.1-67.el4.ia64 +6
Red Hat Enterprise Linux Workstation (v. 6) dhclient-12:4.1.1-12.P1.el6_0.4, dhcp-12:4.1.1-12.P1.el6_0.4
Red Hat Enterprise Linux Workstation Optional (v. 6) dhcp-12:4.1.1-12.P1.el6_0.4, dhcp-devel-12:4.1.1-12.P1.el6_0.4

Fixes 1 record

TI-2011-00858 CVE-2011-0997 · GHSA-hhcj-97jg-v79c

dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and…

HIGH 74

dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained fro…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.84569 Published 2011-04-08 Fixed CWE-20