dhcpcd -- out-of-bound memory access

2005-07-11T00:00:00
ID DSA-750
Type debian
Reporter Debian
Modified 2005-07-11T00:00:00

Description

"infamous42md" discovered that dhcpcd, a DHCP client for automatically configuring IPv4 networking, can be tricked into reading past the end of the supplied DHCP buffer which could lead to the daemon crashing.

The old stable distribution (woody) is not affected by this problem.

For the stable distribution (sarge) this problem has been fixed in version 1.3.22pl4-21sarge1.

For the unstable distribution (sid) this problem has been fixed in version 1.3.22pl4-22.

We recommend that you upgrade your dhcpcd package.