dnsmasq: memory leak in the create_helper() function in /src/helper.c

A flaw was found in the Dnsmasq application where a remote attacker can trigger a memory leak by sending specially crafted DHCP responses to the server. A successful attack is dependent on a specific configuration regarding the domain name set into the dnsmasq.conf file. Over time, the memory lea...

CVE-2020-3509

A vulnerability in the DHCP message handler of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the supervisor to crash, which could result in a denial of service DoS condition. The vulnerability is due to insufficient erro...

Windows Server DHCP Unauthorized Access

The vulnerability of the Windows Server DHCP service for Windows operating systems is related to the lack of protection for service-related data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by sending a specially...

CVE-2020-1031

An information disclosure vulnerability exists in the way that the Windows Server DHCP service improperly discloses the contents of its memory. To exploit the vulnerability, an unauthenticated attacker could send a specially crafted packet to an affected DHCP server. An attacker who successfully...

CVE-2020-15043

iBall WRB303N devices allow CSRF attacks, as demonstrated by enabling remote management, enabling DHCP, or modifying the subnet range for IP addresses...

Treck TCP/IP DHCP Component Out-of-Bounds Read Vulnerability

Treck TCP/IP is a TCP Transmission Control Protocol/IP Internet Interconnection Protocol suite dedicated to embedded systems from Treck, Inc. Treck DHCP stack is a DHCP Dynamic Host Setup Protocol implementation for embedded systems from Treck, Inc. An out-of-bounds read vulnerability exists in t...

Unspecified Vulnerability in Treck TCP/IP DHCP Component

Treck TCP/IP is a TCP Transmission Control Protocol/IP Internet Interconnection Protocol suite dedicated to embedded systems from Treck, Inc. Treck DHCP stack is a DHCP Dynamic Host Setup Protocol implementation for embedded systems from Treck, Inc. A security vulnerability exists in the Treck...

CVE-2020-0596

Improper input validation in DHCPv6 subsystem in IntelR AMT and IntelR ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access...

April 14, 2020—KB4549951 (OS Builds 18362.778 and 18363.778) - EXPIRED

None None...

Cisco Adaptive Security Appliance DHCP DoS

The vulnerability of the DHCP module of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense software-related microprogramming systems is related to errors in processing certain DHCP packets. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Cisco Prime Network Registrar Input Validation Error Vulnerability

Cisco Prime Network Registrar CPNR is a network registrar product from the U.S. company Cisco Cisco. The product provides services such as Dynamic Host Configuration Protocol DHCP, Domain Name System DNS and IP Address Management IPAM. An input validation error vulnerability exists in Cisco Prime...

CVE-2020-3306

A vulnerability in the DHCP module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to incorrect processing ...

PT-2020-2515 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the DHCP module could allow an unauthenticated, remote...

dhcpd DNS Server Resource Release DoS

The vulnerability of the DHCP server dhcpd and the DNS server BIND is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

IPv4 Protocol Data Compromise

The vulnerability of the IPv4 protocol for real-time operating systems developed by Wind River VxWorks is related to insufficient access control mechanisms, such as ipdhcpc and DHCP. Exploiting this vulnerability could allow attackers to compromise the integrity and accessibility of protected...

DHCP Protocol Code Execution

The vulnerability of the DHCP protocol for real-time operating systems like Wind River VxWorks is related to a potential overflow during the parsing of DHCP/DACK messages within the ipdhcpc process. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted...

Junos OS Multiple vulnerabilities (JSA10981)

According to its self-reported version number, the remote Juniper Junos device is affected by multiple vulnerabilities: - When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable...

CVE-2020-7217

An nidhcp4fsmprocessdhcp4packet memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets with a different client-id...

Junos JDHCPD Privilege Escalation

The vulnerability of the Junos Dynamic Host Configuration Protocol Daemon JDHCPD operating system exists due to the lack of measures taken to eliminate special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands wi...

Junos JDHCPD Privilege Escalation

The vulnerability of the Junos Dynamic Host Configuration Protocol Daemon JDHCPD operating system exists due to the lack of measures taken to eliminate special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands wi...