RHEL 7 : dhcp (RHSA-2018:0483)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0483 advisory. - dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server CVE-2018-5732 - dhcp: Reference count...

Scientific Linux Security Update : dhcp on SL7.x x86_64 (20180312)

Security Fixes : - dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server CVE-2018-5732 - dhcp: Reference count overflow in dhcpd allows denial of service CVE-2018-5733 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Oracle Linux 7 : dhcp (ELSA-2018-0483)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0483 advisory. - Resolves: 1550000 - CVE-2018-5733 Avoid buffer overflow reference counter Tenable has extracted the preceding description block directly from the...

Important: Red Hat Security Advisory: dhcp security update

An update for dhcp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server

An out-of-bound memory access flaw was found in the way dhclient processed a DHCP response packet. A malicious DHCP server could potentially use this flaw to crash dhclient processes running on DHCP client machines via a crafted DHCP response packet...

dhcp: Reference count overflow in dhcpd allows denial of service

A denial of service flaw was found in the way dhcpd handled reference counting when processing client requests. A malicious DHCP client could use this flaw to trigger a reference count overflow on the server side, potentially causing dhcpd to crash, by sending large amounts of traffic...

dhcp security update

12:4.2.5-58.0.1 - Added oracle-errwarn-message.patch 12:4.2.5-68 - Resolves: 1550000 - CVE-2018-5733 Avoid buffer overflow reference counter 12:4.2.5-58.2 - Resolves: 1549979 - CVE-2018-5732 Avoid buffer overflow in options parser...

RHEL 6 : dhcp (RHSA-2018:0469)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0469 advisory. The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network...

Solaris 10 (x86) : 148310-06

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Server. Supported versions that are affected are 10 and 11.2. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized...

Solaris 10 (sparc) : 148309-06

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Server. Supported versions that are affected are 10 and 11.2. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized...

CentOS 6 : dhcp (CESA-2018:0469)

An update for dhcp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

dhclient, dhcp security update

CentOS Errata and Security Advisory CESA-2018:0469 An update for dhcp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: dhcp security update

An update for dhcp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Scientific Linux Security Update : dhcp on SL6.x i386/x86_64 (20180308)

Security Fixes : - dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server CVE-2018-5732 - dhcp: Reference count overflow in dhcpd allows denial of service CVE-2018-5733 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

OracleVM 3.3 : dhcp (OVMSA-2018-0024)

The remote OracleVM system is missing necessary patches to address critical security updates : - Added oracle-errwarn-message.patch - Resolves: 1550085 - CVE-2018-5733 Avoid reference overflow 12:4.1.1-53.P1.2 - Resolves: 1550083 - CVE-2018-5732 Avoid options buffer overflow - Resolves: 1063217 -...

Oracle Linux 6 : dhcp (ELSA-2018-0469)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0469 advisory. - Resolves: 1550085 - CVE-2018-5733 Avoid reference overflow 12:4.1.1-53.P1.2 Tenable has extracted the preceding description block directly from the...

OracleVM 3.4 : dhcp (OVMSA-2018-0023)

The remote OracleVM system is missing necessary patches to address critical security updates : - Added oracle-errwarn-message.patch - Resolves: 1550085 - CVE-2018-5733 Avoid reference overflow 12:4.1.1-53.P1.2 - Resolves: 1550083 - CVE-2018-5732 Avoid options buffer overflow - Resolves: 1063217 -...

dhcp security update

12:4.1.1-53.P1.0.1.3 - Added oracle-errwarn-message.patch 12:4.1.1-53.P1.3 - Resolves: 1550085 - CVE-2018-5733 Avoid reference overflow - Resolves: 1550083 - CVE-2018-5732 Avoid options buffer overflow...

Debian DSA-4133-1 : isc-dhcp - security update

Several vulnerabilities have been discovered in the ISC DHCP client, relay and server. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2017-3144 It was discovered that the DHCP server does not properly clean up closed OMAPI connections, which can lead to...

4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0 Multiple Vulnerabilities

The DHCP server version installed on the remote host is 4.1.0 to 4.1-ESV-R15, or 4.2.0 to 4.2.8, or 4.3.0 to 4.3.6, or 4.4.0. It is, therefore, vulnerable to a denial of service condition with in the omapiconnectionwriter function of the omapip/buffer.c script due to improper handling of an empty...