Amazon Linux 2 : dhcp (ALAS-2022-1874)

The version of dhcp installed on the remote host is prior to 4.2.5-79. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1874 advisory. An integer overflow vulnerability was found in the DHCP server. When the optioncodehashlookup function is called from...

Medium: dhcp

Issue Overview: An integer overflow vulnerability was found in the DHCP server. When the "optioncodehashlookup" function is called from "addoption", it increases the option's "refcount" field. However, there is not a corresponding call to "optiondereference" to decrement the "refcount" field. The...

Ubuntu 16.04 ESM : DHCP vulnerabilities (USN-5658-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5658-2 advisory. USN-5658-1 fixed vulnerabilities in DHCP. This update provides the corresponding updates for Ubuntu 16.04 ESM. Tenable has extracted the preceding...

Fedora: Security Advisory for dhcp (FEDORA-2022-c4f274a54f)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2929-2773

Summary: IBM DataQuant for z/OS version 2.1 is affected by CVE-2020-2773 (referenced in the IBM bulletin as CVE-2929-2773 in this entry). The vulnerability is described as an unspecified issue in the Java SE Security component that could allow an unauthenticated attacker to cause a denial of serv...

Mageia: Security Advisory (MGASA-2022-0374)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated dhcp packages fix security vulnerability

In ISC DHCP 4.4.0 - 4.4.3, ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16-P1, when the function optioncodehashlookup is called from addoption, it increases the option's refcount field. However, there is not a corresponding call to optiondereference to decrement the refcount field. The function addoption is on...

Debian dla-3146 : isc-dhcp-client - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3146 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3146-1 [email protected]...

[SECURITY] [DLA 3146-1] isc-dhcp security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3146-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta October 11, 2022 https://wiki.debian.org/LTS -...

DEBIAN-CVE-2022-2929

In ISC DHCP 1.0 - 4.4.3, ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16-P1 a system with access to a DHCP server, sending DHCP packets crafted to include fqdn labels longer than 63 bytes, could eventually cause the server to run out of memory...

CVE-2022-2929

CVE-2022-2929 affects ISC DHCP server components in multiple releases (ISC DHCP 1.0–4.4.3 and 4.1-ESV-R1–4.1-ESV-R16-P1). The issue arises when a DHCP server processes packets with fqdn labels longer than 63 bytes, leading to memory exhaustion on the server. Connected documents corroborate the ro...

CVE-2022-2929 DHCP memory leak

In ISC DHCP 1.0 - 4.4.3, ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16-P1 a system with access to a DHCP server, sending DHCP packets crafted to include fqdn labels longer than 63 bytes, could eventually cause the server to run out of memory...

Debian DSA-5251-1 : isc-dhcp - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5251 advisory. Several vulnerabilities have been discovered in the ISC DHCP client, relay and server. CVE-2022-2928 It was discovered that the DHCP server does not correctly...

[SECURITY] [DSA 5251-1] isc-dhcp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5251-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 06, 2022 https://www.debian.org/security/faq -...

Ubuntu: Security Advisory (USN-5658-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2022-278-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] dhcp

New dhcp packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/dhcp-4.4.3P1-i586-1slack15.0.txz: Upgraded. This update fixes two security issues: Corrected a reference count leak...

UBUNTU-CVE-2022-2929

In ISC DHCP 1.0 - 4.4.3, ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16-P1 a system with access to a DHCP server, sending DHCP packets crafted to include fqdn labels longer than 63 bytes, could eventually cause the server to run out of memory...

Mageia: Security Advisory (MGASA-2013-0372)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2013-0371)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...