CVE-2017-10983

An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service...

CVE-2017-10981

An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in frdhcpdecode" and a denial of service...

CVE-2017-10987

An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in frdhcpdecodesuboptions" and a denial of service...

CVE-2017-10986

An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcpattr2vp" and a denial of service...

UBUNTU-CVE-2017-10983

An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service...

Fedora 26 : 12:dhcp / bind99 (2017-87f1f8c798)

Update to new ISC supported version 9.9.10-P2 including security fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introduci...

UBUNTU-CVE-2017-10981

An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in frdhcpdecode" and a denial of service...

CVE-2017-2348 Junos OS: jdhcpd daemon crash due to invalid IPv6 UDP packets

The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CPU utilization and repeated crashes of the jdhcpd daemon can result in a denial of service as DHCP service is interrupted. No other Juniper Networks...

CVE-2017-10605 Junos: SRX Series denial of service vulnerability in flowd due to crafted DHCP packet

On all vSRX and SRX Series devices, when the DHCP or DHCP relay is configured, specially crafted packet might cause the flowd process to crash, halting or interrupting traffic from flowing through the devices. Repeated crashes of the flowd process may constitute an extended denial of service...

CVE-2017-10605

On Junos OS for vSRX/SRX Series, DHCP or DHCP relay can trigger flowd crashes via specially crafted DHCP packets, causing traffic interruption and potential extended DoS with failover implications. Affected releases include 12.1X46 before 12.1X46-D67, 12.3X48 before 12.3X48-D50, and 15.1X49 befor...

Fedora Update for dhcp FEDORA-2017-167cfa7b09

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Juniper Networks Junos OS SRX Series: DHCP DoS Vulnerability

Junos OS on SRX series is prone to a denial of service vulnerability in flowd due to crafted DHCP packet. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Fedora 25 : 12:dhcp / bind99 (2017-167cfa7b09)

Update to new ISC supported version 9.9.10. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] Fedora 25 Update: bind99-9.9.10-1.P2.fc25

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP...

[SECURITY] Fedora 25 Update: dhcp-4.3.5-3.fc25

DHCP Dynamic Host Configuration Protocol...

[SECURITY] Fedora 26 Update: dhcp-4.3.5-7.fc26

DHCP Dynamic Host Configuration Protocol...

[SECURITY] Fedora 26 Update: bind99-9.9.10-1.P2.fc26

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP...

FreeRadius -- Multiple vulnerabilities

Guido Vranken reports: Multiple vulnerabilities found via fuzzing: FR-GV-201 v2,v3 Read / write overflow in makesecret FR-GV-202 v2 Write overflow in radcoalesce FR-GV-203 v2 DHCP - Memory leak in decodetlv FR-GV-204 v2 DHCP - Memory leak in frdhcpdecode FR-GV-205 v2 DHCP - Buffer over-read in...

[ASA-201706-9] wireshark-cli: denial of service

Arch Linux Security Advisory ASA-201706-9 ========================================= Severity: Low Date : 2017-06-12 CVE-ID : CVE-2017-9343 CVE-2017-9344 CVE-2017-9345 CVE-2017-9346 CVE-2017-9347 CVE-2017-9348 CVE-2017-9349 CVE-2017-9350 CVE-2017-9351 CVE-2017-9352 CVE-2017-9353 CVE-2017-9354...

CVE-2016-8229

A cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 could be exploited by an attacker with access to the DHCP server used by the system where LSB is installed...