Debian ISC-DHCP package update addresses denial of service vulnerabilities CVE-2022-2928 and CVE-2022-292
Reporter | Title | Published | Views | Family All 143 |
---|---|---|---|---|
![]() | Moderate: dhcp security and enhancement update | 9 May 202300:00 | – | almalinux |
![]() | Moderate: dhcp security and bug fix update | 16 May 202300:00 | – | almalinux |
![]() | [SECURITY] [DLA 3146-1] isc-dhcp security update | 10 Oct 202223:44 | – | debian |
![]() | [SECURITY] [DSA 5251-1] isc-dhcp security update | 6 Oct 202219:02 | – | debian |
![]() | [SECURITY] Fedora 35 Update: dhcp-4.4.3-4.P1.fc35 | 26 Oct 202217:35 | – | fedora |
![]() | [SECURITY] Fedora 37 Update: dhcp-4.4.3-4.P1.fc37 | 17 Oct 202222:55 | – | fedora |
![]() | [SECURITY] Fedora 36 Update: dhcp-4.4.3-4.P1.fc36 | 14 Oct 202213:03 | – | fedora |
![]() | Security Bulletin: ISC DHCP server for IBM i is vulnerable to a denial of service attack due to a memory leak and refererence count overflow (CVE-2022-2928, CVE-2022-2929) | 2 Dec 202214:12 | – | ibm |
![]() | Fedora 37 : dhcp (2022-9ca9a94e28) | 14 Nov 202400:00 | – | nessus |
![]() | Oracle Linux 8 : dhcp (ELSA-2023-3000) | 24 May 202300:00 | – | nessus |
Source | Link |
---|---|
security-tracker | www.security-tracker.debian.org/tracker/DSA-5251 |
debian | www.debian.org/security/2022/DSA-5251-1 |
security-tracker | www.security-tracker.debian.org/tracker/isc-dhcp |
# SPDX-FileCopyrightText: 2022 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.705251");
script_cve_id("CVE-2022-2928", "CVE-2022-2929");
script_tag(name:"creation_date", value:"2022-10-07 01:00:05 +0000 (Fri, 07 Oct 2022)");
script_version("2024-02-02T05:06:08+0000");
script_tag(name:"last_modification", value:"2024-02-02 05:06:08 +0000 (Fri, 02 Feb 2024)");
script_tag(name:"cvss_base", value:"6.1");
script_tag(name:"cvss_base_vector", value:"AV:A/AC:L/Au:N/C:N/I:N/A:C");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2022-10-13 13:33:13 +0000 (Thu, 13 Oct 2022)");
script_name("Debian: Security Advisory (DSA-5251-1)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2022 Greenbone AG");
script_family("Debian Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/debian_linux", "ssh/login/packages", re:"ssh/login/release=DEB11");
script_xref(name:"Advisory-ID", value:"DSA-5251-1");
script_xref(name:"URL", value:"https://www.debian.org/security/2022/DSA-5251-1");
script_xref(name:"URL", value:"https://security-tracker.debian.org/tracker/DSA-5251");
script_xref(name:"URL", value:"https://security-tracker.debian.org/tracker/isc-dhcp");
script_tag(name:"summary", value:"The remote host is missing an update for the Debian 'isc-dhcp' package(s) announced via the DSA-5251-1 advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"Several vulnerabilities have been discovered in the ISC DHCP client, relay and server.
CVE-2022-2928
It was discovered that the DHCP server does not correctly perform option reference counting when configured with 'allow leasequery,'. A remote attacker can take advantage of this flaw to cause a denial of service (daemon crash).
CVE-2022-2929
It was discovered that the DHCP server is prone to a memory leak flaw when handling contents of option 81 (fqdn) data received in a DHCP packet. A remote attacker can take advantage of this flaw to cause DHCP servers to consume resources, resulting in denial of service.
For the stable distribution (bullseye), these problems have been fixed in version 4.4.1-2.3+deb11u1.
We recommend that you upgrade your isc-dhcp packages.
For the detailed security status of isc-dhcp please refer to its security tracker page at: [link moved to references]");
script_tag(name:"affected", value:"'isc-dhcp' package(s) on Debian 11.");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-deb.inc");
release = dpkg_get_ssh_release();
if(!release)
exit(0);
res = "";
report = "";
if(release == "DEB11") {
if(!isnull(res = isdpkgvuln(pkg:"isc-dhcp-client", ver:"4.4.1-2.3+deb11u1", rls:"DEB11"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"isc-dhcp-client-ddns", ver:"4.4.1-2.3+deb11u1", rls:"DEB11"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"isc-dhcp-client-udeb", ver:"4.4.1-2.3+deb11u1", rls:"DEB11"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"isc-dhcp-common", ver:"4.4.1-2.3+deb11u1", rls:"DEB11"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"isc-dhcp-dev", ver:"4.4.1-2.3+deb11u1", rls:"DEB11"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"isc-dhcp-relay", ver:"4.4.1-2.3+deb11u1", rls:"DEB11"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"isc-dhcp-server", ver:"4.4.1-2.3+deb11u1", rls:"DEB11"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"isc-dhcp-server-ldap", ver:"4.4.1-2.3+deb11u1", rls:"DEB11"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
exit(0);
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo