Black Hat 2018: Update Mechanisms Allow Remote Attacks on UEFI Firmware

LAS VEGAS – Researchers said they found buffer overflow flaws in the firmware for ASRock and ASUS, potentially enabling bad actors to remotely launch man-in-the-middle MITM attacks. The findings, which will be presented Wednesday at Black Hat USA this week by researchers from Eclypsium, show that...

[SECURITY] Fedora 26 Update: dhcp-4.3.5-11.fc26

DHCP Dynamic Host Configuration Protocol...

RHEL 6 : dhcp (RHSA-2018:1454)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1454 advisory. The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration...

Red Hat DHCP Client Command Execution Vulnerability

DHCP is a LAN network protocol that is primarily used for dynamic IP address allocation for internal networks. A command execution vulnerability exists in the Red Hat DHCP client, which allows an attacker to attack a Red Hat system, gain root privileges, and execute arbitrary commands by spoofing...

[SECURITY] Fedora 27 Update: dhcp-4.3.6-10.fc27

DHCP Dynamic Host Configuration Protocol...

dhcp: Command injection vulnerability in the DHCP client NetworkManager integration script

A command injection flaw was found in the NetworkManager integration script included in the DHCP client packages in Red Hat Enterprise Linux. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root...

Critical: Red Hat Security Advisory: dhcp security update

An update for dhcp is now available for Red Hat Enterprise Linux 7.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

dhcp: Command injection vulnerability in the DHCP client NetworkManager integration script

A command injection flaw was found in the NetworkManager integration script included in the DHCP client packages in Red Hat Enterprise Linux. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root...

[SECURITY] Fedora 28 Update: dhcp-4.3.6-20.fc28

DHCP Dynamic Host Configuration Protocol...

Cisco IOS Software and IOS XE Software Input Validation Vulnerability (CNVD-2018-08181)

Cisco IOS Software and IOS XE Software are both operating systems developed by Cisco for its network devices. An input validation vulnerability exists in Cisco IOS Software and IOS XE Software that stems from incomplete input checksum detection. A remote attacker could exploit this vulnerability ...

CentOS Update for dhclient CESA-2018:0469 centos6

Check the version of dhclient SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882852";...

dhclient, dhcp security update

CentOS Errata and Security Advisory CESA-2018:0469 An update for dhcp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

dhcp: Reference count overflow in dhcpd allows denial of service

A denial of service flaw was found in the way dhcpd handled reference counting when processing client requests. A malicious DHCP client could use this flaw to trigger a reference count overflow on the server side, potentially causing dhcpd to crash, by sending large amounts of traffic...

[SECURITY] Fedora 27 Update: dhcp-4.3.6-9.fc27

DHCP Dynamic Host Configuration Protocol...

[SECURITY] Fedora 27 Update: dhcp-4.3.6-7.fc27

DHCP Dynamic Host Configuration Protocol...

[SECURITY] Fedora 26 Update: dhcp-4.3.5-10.fc26

DHCP Dynamic Host Configuration Protocol...

Lantronix Remote Configuration Protocol Detection (UDP)

A service supporting the Lantronix remote configuration protocol over TCP is running at this host. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Siemens Ruggedcom ROS and SCALANCE Unauthorized Operation Vulnerability

Siemens RuggedCom ROS are ROX-based devices used for device connectivity in harsh environments, such as substations, traffic management chassis, etc. Products such as the SCALANCE XB-200 are industrial Ethernet switches. Siemens Ruggedcom ROS and SCALANCE Unauthorized Operation Vulnerability Afte...

CVE-2017-9945

In the Siemens 7KM PAC Switched Ethernet PROFINET expansion module All versions V2.1.3, a Denial-of-Service condition could be induced by a specially crafted PROFINET DCP packet sent as a local Ethernet Layer 2 broadcast. The affected component requires a manual restart via the main device to...

freeradius: Buffer over-read in fr_dhcp_decode_suboptions()

An out-of-bounds read flaw was found in the way FreeRADIUS server handled decoding of DHCP packets. A remote attacker could use this flaw to crash the FreeRADIUS server by sending a specially crafted DHCP request...