Red Hat Security Advisory

RHSA-2021:2405

dhcp security update

Released 2021-06-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux ComputeNode EUS (v. 7.7) dhclient-12:4.2.5-77.el7_7.1, dhcp-12:4.2.5-77.el7_7.1, dhcp-common-12:4.2.5-77.el7_7.1 +1
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7) dhcp-12:4.2.5-77.el7_7.1, dhcp-devel-12:4.2.5-77.el7_7.1
Red Hat Enterprise Linux Server EUS (v. 7.7) dhclient-12:4.2.5-77.el7_7.1, dhcp-12:4.2.5-77.el7_7.1, dhcp-common-12:4.2.5-77.el7_7.1 +2
Red Hat Enterprise Linux Server Optional EUS (v. 7.7) dhcp-devel-12:4.2.5-77.el7_7.1, dhcp-devel-12:4.2.5-77.el7_7.1.ppc

Fixes 1 record

TI-2021-07477 CVE-2021-25217 · GHSA-pf98-cx5w-r49r

A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient

MEDIUM 41

In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series) are beyond their End-of-Life (EOL) and no longer s…

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.06118 Published 2021-05-26 Fixed in 4.1-ESV-R16-P1, 4.4.2-P1 CWE-119