Red Hat Security Advisory

RHSA-2018:0483

dhcp security update

Released 2018-03-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) dhclient-12:4.2.5-58.el7_4.3, dhcp-12:4.2.5-58.el7_4.3, dhcp-common-12:4.2.5-58.el7_4.3 +1
Red Hat Enterprise Linux Client Optional (v. 7) dhcp-12:4.2.5-58.el7_4.3, dhcp-devel-12:4.2.5-58.el7_4.3
Red Hat Enterprise Linux ComputeNode (v. 7) dhclient-12:4.2.5-58.el7_4.3, dhcp-12:4.2.5-58.el7_4.3, dhcp-common-12:4.2.5-58.el7_4.3 +1
Red Hat Enterprise Linux ComputeNode Optional (v. 7) dhcp-12:4.2.5-58.el7_4.3, dhcp-devel-12:4.2.5-58.el7_4.3
Red Hat Enterprise Linux Server (v. 7) dhclient-12:4.2.5-58.el7_4.3, dhcp-12:4.2.5-58.el7_4.3, dhcp-common-12:4.2.5-58.el7_4.3 +2
Red Hat Enterprise Linux Server Optional (v. 7) dhcp-devel-12:4.2.5-58.el7_4.3, dhcp-devel-12:4.2.5-58.el7_4.3.ppc
Red Hat Enterprise Linux Workstation (v. 7) dhclient-12:4.2.5-58.el7_4.3, dhcp-12:4.2.5-58.el7_4.3, dhcp-common-12:4.2.5-58.el7_4.3 +1
Red Hat Enterprise Linux Workstation Optional (v. 7) dhcp-devel-12:4.2.5-58.el7_4.3
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) dhclient-12:4.2.5-58.el7_4.3, dhcp-12:4.2.5-58.el7_4.3, dhcp-common-12:4.2.5-58.el7_4.3 +1
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) dhcp-devel-12:4.2.5-58.el7_4.3

Fixes 2 records

TI-2018-04140 CVE-2018-5733 · GHSA-6f7q-j62j-5545

A malicious client can overflow a reference counter in ISC dhcpd

MEDIUM 52

A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.20242 Published 2019-01-16 Partial fix CWE-190

TI-2018-04139 CVE-2018-5732 · GHSA-j4cm-vph7-f7qg

A specially constructed response from a malicious server can cause a buffer overflow in dhclient

MEDIUM 41

Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a respo…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05244 Published 2019-10-09 Partial fix CWE-119