freebsd-dhclient-poc

CVE-2020-7461 重现 PoC 作者: Moshe Kol, Shlomi Oberman 用于 FreeBSD dhclient 在解析 DHCP 选项 119 CVE-2020-7461 时堆缓冲区溢出漏洞的重现 PoC。 问题出在文件 sbin/dhclient/options.c 中的函数 findsearchdomainnamelen 中。 当服务器提供 DHCP 选项 119（域搜索，RFC 3397）时，expanddomainsearch 调用此函数。 当使用压缩方案时，函数 findsearchdomainnamelen...

CVE-2020-7461

In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient8 fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle ...

Juniper Junos OS Vulnerability (JSA69496)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69496 advisory. - In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient8 fails to handle...

CVE-2020-7461

In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient8 fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle ...