Red Hat Security Advisory

RHSA-2023:2502

dhcp security and enhancement update

Released 2023-05-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 9) dhcp-12:4.4.2-18.b1.el9, dhcp-client-12:4.4.2-18.b1.el9, dhcp-common-12:4.4.2-18.b1.el9 +2

Fixes 2 records

TI-2022-02709 CVE-2022-2929 · GHSA-wjcc-8xx5-frqg

DHCP memory leak

LOW 30

In ISC DHCP 1.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1 a system with access to a DHCP server, sending DHCP packets crafted to include fqdn labels longer than 63 bytes, could eventually cause the server to run ou…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00664 Published 2022-10-07 Partial fix CWE-770

TI-2022-02708 CVE-2022-2928 · GHSA-5fp7-mmwq-gvmw

An option refcount overflow exists in dhcpd

LOW 30

In ISC DHCP 4.4.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called from add_option(), it increases the option's refcount field.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00711 Published 2022-10-07 Partial fix CWE-476