Red Hat Security Advisory

RHSA-2021:2414

dhcp security update

Released 2021-06-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server AUS (v. 7.4) dhclient-12:4.2.5-58.el7_4.5, dhcp-12:4.2.5-58.el7_4.5, dhcp-common-12:4.2.5-58.el7_4.5 +1
Red Hat Enterprise Linux Server E4S (v. 7.4) dhclient-12:4.2.5-58.el7_4.5, dhcp-12:4.2.5-58.el7_4.5, dhcp-common-12:4.2.5-58.el7_4.5 +1
Red Hat Enterprise Linux Server Optional AUS (v. 7.4) dhcp-devel-12:4.2.5-58.el7_4.5
Red Hat Enterprise Linux Server Optional E4S (v. 7.4) dhcp-devel-12:4.2.5-58.el7_4.5
Red Hat Enterprise Linux Server Optional TUS (v. 7.4) dhcp-devel-12:4.2.5-58.el7_4.5
Red Hat Enterprise Linux Server TUS (v. 7.4) dhclient-12:4.2.5-58.el7_4.5, dhcp-12:4.2.5-58.el7_4.5, dhcp-common-12:4.2.5-58.el7_4.5 +1

Fixes 1 record

TI-2021-07477 CVE-2021-25217 · GHSA-pf98-cx5w-r49r

A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient

MEDIUM 41

In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series) are beyond their End-of-Life (EOL) and no longer s…

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.06118 Published 2021-05-26 Fixed in 4.1-ESV-R16-P1, 4.4.2-P1 CWE-119