Red Hat Security Advisory

RHSA-2018:1453

dhcp security update

Released 2018-05-15 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) dhclient-12:4.2.5-68.el7_5.1, dhcp-12:4.2.5-68.el7_5.1, dhcp-common-12:4.2.5-68.el7_5.1 +1
Red Hat Enterprise Linux Client Optional (v. 7) dhcp-12:4.2.5-68.el7_5.1, dhcp-devel-12:4.2.5-68.el7_5.1
Red Hat Enterprise Linux ComputeNode (v. 7) dhclient-12:4.2.5-68.el7_5.1, dhcp-12:4.2.5-68.el7_5.1, dhcp-common-12:4.2.5-68.el7_5.1 +1
Red Hat Enterprise Linux ComputeNode Optional (v. 7) dhcp-12:4.2.5-68.el7_5.1, dhcp-devel-12:4.2.5-68.el7_5.1
Red Hat Enterprise Linux Server (v. 7) dhclient-12:4.2.5-68.el7_5.1, dhcp-12:4.2.5-68.el7_5.1, dhcp-common-12:4.2.5-68.el7_5.1 +2
Red Hat Enterprise Linux Server Optional (v. 7) dhcp-devel-12:4.2.5-68.el7_5.1, dhcp-devel-12:4.2.5-68.el7_5.1.ppc
Red Hat Enterprise Linux Workstation (v. 7) dhclient-12:4.2.5-68.el7_5.1, dhcp-12:4.2.5-68.el7_5.1, dhcp-common-12:4.2.5-68.el7_5.1 +1
Red Hat Enterprise Linux Workstation Optional (v. 7) dhcp-devel-12:4.2.5-68.el7_5.1
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) dhclient-12:4.2.5-68.el7_5.1, dhcp-12:4.2.5-68.el7_5.1, dhcp-common-12:4.2.5-68.el7_5.1 +1
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) dhcp-devel-12:4.2.5-68.el7_5.1

Fixes 1 record

TI-2018-01029 CVE-2018-1111 · GHSA-5jw9-5ff9-vr5p

Command injection in Red Hat dhcp

HIGH 77

DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client.

CVSS 3.0HIGH 7.5 Adjacent network No auth No interaction EPSS 0.97862 Published 2018-05-17 Fixed CWE-77