Red Hat Security AdvisoryRHSA-2018:0469
dhcp security update
Released 2018-03-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) dhclient-12:4.1.1-53.P1.el6_9.3, dhcp-12:4.1.1-53.P1.el6_9.3, dhcp-common-12:4.1.1-53.P1.el6_9.3
- Red Hat Enterprise Linux Desktop Optional (v. 6) dhcp-12:4.1.1-53.P1.el6_9.3, dhcp-devel-12:4.1.1-53.P1.el6_9.3
- Red Hat Enterprise Linux HPC Node (v. 6) dhclient-12:4.1.1-53.P1.el6_9.3, dhcp-12:4.1.1-53.P1.el6_9.3, dhcp-common-12:4.1.1-53.P1.el6_9.3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) dhcp-12:4.1.1-53.P1.el6_9.3, dhcp-devel-12:4.1.1-53.P1.el6_9.3
- Red Hat Enterprise Linux Server (v. 6) dhclient-12:4.1.1-53.P1.el6_9.3, dhcp-12:4.1.1-53.P1.el6_9.3, dhcp-common-12:4.1.1-53.P1.el6_9.3
- Red Hat Enterprise Linux Server Optional (v. 6) dhcp-devel-12:4.1.1-53.P1.el6_9.3, dhcp-devel-12:4.1.1-53.P1.el6_9.3.ppc
- Red Hat Enterprise Linux Workstation (v. 6) dhclient-12:4.1.1-53.P1.el6_9.3, dhcp-12:4.1.1-53.P1.el6_9.3, dhcp-common-12:4.1.1-53.P1.el6_9.3
- Red Hat Enterprise Linux Workstation Optional (v. 6) dhcp-devel-12:4.1.1-53.P1.el6_9.3
Fixes 2 records
Priority MEDIUM 52
A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.20242 · Published 2019-01-16 · Partial fix CWE-190
Priority MEDIUM 41
Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a respo…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05244 · Published 2019-10-09 · Partial fix CWE-119
