[SECURITY] Fedora 26 Update: dhcp-4.3.5-7.fc26

DHCP Dynamic Host Configuration Protocol...

The vulnerability of the Junos operating system’s jdhcpd daemon allows a attacker to cause the application to terminate and restart, thereby triggering a service failure.

The vulnerability of the Junos operating system’s jdhcpd component is related to improper data processing. Exploiting this vulnerability can allow a remote attacker to cause the application to stop working and restart, as well as trigger a service failure using a specially crafted DHCPv6 packet...

Wireshark DHCP Parser Buffer Overflow Vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A buffer overflow vulnerability exists in the Wireshark DHCP parser due to a failure to...

ALPINE-CVE-2017-9351

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DHCP dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-bootp.c by extracting the Vendor Class Identifier more carefully...

The vulnerability of the Cisco IOS operating system’s DHCP client implementation allows a attacker to trigger a service failure or cause a device to restart.

The vulnerability of the Cisco IOS operating system’s DHCP client implementation is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures or trigger a device restart using specially crafted DHCP packets...

The vulnerability of the Cisco IOS operating system’s DHCP service allows a attacker to trigger a device reboot and a service failure.

The vulnerability of the DHCP service in Cisco IOS operating systems is related to the use of an uncontrolled format string. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot and a service failure through a specially crafted DHCP packet...

bash: Arbitrary code execution via malicious hostname

An arbitrary command injection flaw was found in the way bash processed the hostname value. A malicious DHCP server could use this flaw to execute arbitrary commands on the DHCP client machines running bash under specific circumstances...

ALPINE-CVE-2017-5597

In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dhcpv6.c by changing a data type to avoid an integer overflow...

Dual DHCP DNS Server Denial of Service Vulnerability

Dual DHCP DNS Server is a LAN software that provides both DHCP and DNS servers. A denial of service vulnerability exists in Dual DHCP DNS Server version 7.29, which can be exploited by attackers to cause a denial of service program crash...

Denial of Service Vulnerability in Multiple Huawei Firewall Devices

The Huawei USG9580, 9560 and 9520 are all USG9500 series firewall appliances from Huawei, China. A denial of service vulnerability exists in multiple Huawei firewall devices. Due to insufficient checksums on certain fields of DHCP messages, an unauthenticated attacker can send special DHCP reques...

dhcp: unclosed TCP connections to OMAPI or failover ports can cause DoS

A resource-consumption flaw was discovered in the DHCP server. dhcpd did not restrict the number of open connections to OMAPI and failover ports. A remote attacker able to establish TCP connections to one of these ports could use this flaw to cause dhcpd to exit unexpectedly, stop responding...

Cisco Adaptive Security Appliance Software Denial of Service Vulnerability (CNVD-2016-09468)

Cisco Adaptive Security Appliance Software is a modular platform that provides security and VPN services from Cisco. A denial of service vulnerability exists in Cisco Adaptive Security Appliance Software versions 8.4.7.29 and 9.1.7.4, which could allow a remote attacker to cause a denial of servi...

Cisco NX-OS Software Denial of Service Vulnerability (CNVD-2016-09010)

Cisco NX-OS is a data center-class operating system. A denial of service vulnerability exists in Cisco NX-OS Software's DHCPv4 relay agent and intelligent relay agent implementations. It could allow an unauthenticated, remote attacker to cause a denial of service on an affected device...

[SECURITY] Fedora 23 Update: dhcp-4.3.3-10.P1.fc23

DHCP Dynamic Host Configuration Protocol...

Tmdocs dns_dhcp SQL Injection Vulnerability

Tmdocs dnsdhcp is a web interface that allows management of DNSmasq a tool for configuring DNS and DHCP and static DHCP leases in Mikrotik routers. A SQL injection vulnerability exists in Tmdocs dnsdhcp. An attacker could use this vulnerability to take control of an application, access or modify...

openstack-neutron: MAC source address spoofing vulnerability

Neutron functionality includes internal firewall management between networks. Due to the relaxed nature of particular rules, it is possible for machines on the same layer 2 networks to forge non-IP traffic, such as ARP and DHCP requests...

openstack-neutron: DHCP spoofing vulnerability

Neutron functionality includes internal firewall management between networks. Due to the relaxed nature of particular rules, it is possible for machines on the same layer 2 networks to forge non-IP traffic, such as ARP and DHCP requests...

openstack-neutron: ICMPv6 source address spoofing vulnerability

Neutron functionality includes internal firewall management between networks. Due to the relaxed nature of particular rules, it is possible for machines on the same layer 2 networks to forge non-IP traffic, such as ARP and DHCP requests...

openstack-neutron: MAC source address spoofing vulnerability

Neutron functionality includes internal firewall management between networks. Due to the relaxed nature of particular rules, it is possible for machines on the same layer 2 networks to forge non-IP traffic, such as ARP and DHCP requests...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the dhcp3-relay package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...