5670 matches found
CVE-2023-50432
simple-dhcp-server through ec976d2 allows remote attackers to cause a denial of service daemon crash by sending a DHCP packet without any option fields, which causes freepacket in dhcppacket.c to dereference a NULL pointer...
CVE-2023-50432
simple-dhcp-server through ec976d2 allows remote attackers to cause a denial of service daemon crash by sending a DHCP packet without any option fields, which causes freepacket in dhcppacket.c to dereference a NULL pointer...
Open DHCP Server 安全漏洞
Open DHCP Server is an open source software from an individual developer that provides DHCP services. A security vulnerability exists in DHCP Server ec976d2 and prior versions, which stems from a type confusion error that can lead to a large memory allocation, allowing remote attackers to cause a...
PT-2024-13938 · Unknown · Simple-Dhcp-Server
Name of the Vulnerable Software and Affected Versions: simple-dhcp-server versions through ec976d2 Description: The issue allows remote attackers to cause a denial of service by sending a malicious DHCP packet. This is caused by a type confusion bug that results in a large memory allocation. When...
CVE-2023-50432
simple-dhcp-server through ec976d2 allows remote attackers to cause a denial of service daemon crash by sending a DHCP packet without any option fields, which causes freepacket in dhcppacket.c to dereference a NULL pointer...
CVE-2023-50432
CVE-2023-50432 affects the open-source DHCP server version(s) up to ec976d2. Affected component: DHCP packet handling in simple-dhcp-server. The underlying issue is a NULL pointer dereference in free_packet within dhcp_packet.c when processing a DHCP packet with no option fields, enabling a remot...
PT-2024-13937 · Unknown · Simple-Dhcp-Server
Name of the Vulnerable Software and Affected Versions: simple-dhcp-server through ec976d2 Description: The issue allows remote attackers to cause a denial of service daemon crash by sending a DHCP packet without any option fields, which causes free packet in dhcp packet.c to dereference a NULL...
CVE-2023-50433
This CVE affects simple-dhcp-server (marshall in dhcp_packet.c). A type confusion bug can trigger an excessively large memory allocation, causing a remote denial-of-service when a crafted DHCP packet is processed and the allocation fails. The issue is documented across multiple sources (NVD/Red H...
CVE-2023-50433
marshall in dhcppacket.c in simple-dhcp-server through ec976d2 allows remote attackers to cause a denial of service by sending a malicious DHCP packet. The crash is caused by a type confusion bug that results in a large memory allocation; when this memory allocation fails the DHCP server will cra...
RHEL 8 : bind and dhcp (RHSA-2024:1782)
"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1782 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...
CVE-2024-4251
A vulnerability was found in Tenda i21 1.0.0.144656. It has been rated as critical. Affected by this issue is the function fromDhcpSetSer of the file /goform/DhcpSetSe. The manipulation of the argument dhcpStartIp/dhcpEndIp/dhcpGw/dhcpMask/dhcpLeaseTime/dhcpDns1/dhcpDns2 leads to stack-based buff...
CVE-2024-4165
A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.179502. Affected is the function modifyDhcpRule of the file /goform/modifyDhcpRule. The manipulation of the argument bindDhcpIndex leads to stack-based buffer overflow. It is possible to launch the attack remotely. T...
USN-6657-2: Dnsmasq vulnerabilities
USN-6657-1 fixed several vulnerabilities in Dnsmasq. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Elias Heftrig, Haya Schulmann, Niklas Vogel, and Michael Waidner discovered that Dnsmasq icorrectly handled validating DNSSEC...
CVE-2024-4116
A vulnerability has been found in Tenda W15E 15.11.0.14 and classified as critical. Affected by this vulnerability is the function formDelDhcpRule of the file /goform/DelDhcpRule. The manipulation of the argument delDhcpIndex leads to stack-based buffer overflow. The attack can be launched...
Tenda W15E 安全漏洞
Tenda W15E is a wireless router from Tenda China. A security vulnerability exists in Tenda W15E version 15.11.0.14, which is caused by a buffer overflow vulnerability in the delDhcpIndex parameter of the formDelDhcpRule method of the /goform/DelDhcpRule file...
Unspecified vulnerability in Tenda AC500 (CNVD-2024-20427)
The Tenda AC500 is a Gigabit port access controller from Tenda, China. A security vulnerability exists in Tenda AC500 version 2.0.1.91307, which stems from a buffer overflow in the page parameter of the fromDhcpListClient method of the /goform/DhcpListClient file. No details of the vulnerability...
CVE-2022-2929 affecting package dhcp for versions less than 4.4.3.P1-1
CVE-2022-2929 affecting package dhcp for versions less than 4.4.3.P1-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-2928 affecting package dhcp for versions less than 4.4.3.P1-1
CVE-2022-2928 affecting package dhcp for versions less than 4.4.3.P1-1. An upgraded version of the package is available that resolves this issue...
PT-2024-2971 · Tenda · Tenda W30E
Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0 V1.0.1.25633 Description: The issue is related to a stack overflow vulnerability in the fromDhcpListClient function, which can be exploited via the page parameter. This vulnerability may allow a remote attacker to impac...