Red Hat Security Advisory

RHSA-2021:2357

dhcp security update

Released 2021-06-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) dhclient-12:4.2.5-83.el7_9.1, dhcp-12:4.2.5-83.el7_9.1, dhcp-common-12:4.2.5-83.el7_9.1 +1
Red Hat Enterprise Linux Client Optional (v. 7) dhcp-12:4.2.5-83.el7_9.1, dhcp-devel-12:4.2.5-83.el7_9.1
Red Hat Enterprise Linux ComputeNode Optional (v. 7) dhcp-12:4.2.5-83.el7_9.1, dhcp-devel-12:4.2.5-83.el7_9.1
Red Hat Enterprise Linux Server (v. 7) dhclient-12:4.2.5-83.el7_9.1, dhcp-12:4.2.5-83.el7_9.1, dhcp-common-12:4.2.5-83.el7_9.1 +2
Red Hat Enterprise Linux Server Optional (v. 7) dhcp-devel-12:4.2.5-83.el7_9.1, dhcp-devel-12:4.2.5-83.el7_9.1.ppc
Red Hat Enterprise Linux Workstation (v. 7) dhclient-12:4.2.5-83.el7_9.1, dhcp-12:4.2.5-83.el7_9.1, dhcp-common-12:4.2.5-83.el7_9.1 +1
Red Hat Enterprise Linux Workstation Optional (v. 7) dhcp-devel-12:4.2.5-83.el7_9.1

Fixes 1 record

TI-2021-07477 CVE-2021-25217 · GHSA-pf98-cx5w-r49r

A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient

MEDIUM 41

In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series) are beyond their End-of-Life (EOL) and no longer s…

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.06118 Published 2021-05-26 Fixed in 4.1-ESV-R16-P1, 4.4.2-P1 CWE-119