USN-5658-3 isc-dhcp vulnerabilities

USN-5658-1 fixed several vulnerabilities in DHCP. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that DHCP incorrectly handled option reference counting. A remote attacker could possibly use this issue to cause DHCP servers to cras...

Moderate: dhcp security and enhancement update

The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to...

CVE-2022-0324

There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that could cause buffer overflow in a memcpy call, leading to out-of-bounds memory write that would cause dhcp6relay to crash. Dhcp6relay is a critical process and could cause dhcp...

sonic-buildimage 安全漏洞

sonic-buildimage is an open source library for SONiC. Scripts to execute installable binary image builds for SONiC A security vulnerability exists in sonic-buildimage, which stems from a vulnerability in the DHCPv6 packet parsing code, which can be exploited by an attacker to craft a packet that...

PT-2022-13105 · Unknown · Dhcp6Relay

Name of the Vulnerable Software and Affected Versions: dhcp6relay affected versions not specified Description: The issue is related to a buffer overflow in the DHCPv6 packet parsing code, which could be exploited by a remote attacker to craft a packet that causes an out-of-bounds memory write,...

[SECURITY] Fedora 35 Update: dhcp-4.4.3-4.P1.fc35

DHCP Dynamic Host Configuration Protocol...

[SECURITY] Fedora 37 Update: dhcp-4.4.3-4.P1.fc37

DHCP Dynamic Host Configuration Protocol...

[SECURITY] Fedora 36 Update: dhcp-4.4.3-4.P1.fc36

DHCP Dynamic Host Configuration Protocol...

The vulnerability of the create_helper() function in the /src/helper.c component of the DNS server Dnsmasq, which allows a hacker to cause a service failure.

The vulnerability of the createhelper function in the /src/helper.c component of the DNS server Dnsmasq is related to the allocation of unlimited memory. Exploiting this vulnerability allows a remote attacker to cause a service failure by using a specially created DHCP response...

CVE-2022-38026

Windows DHCP Client Information Disclosure Vulnerability...

ALPINE-CVE-2022-2929

In ISC DHCP 1.0 - 4.4.3, ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16-P1 a system with access to a DHCP server, sending DHCP packets crafted to include fqdn labels longer than 63 bytes, could eventually cause the server to run out of memory...

DEBIAN-CVE-2022-2929

In ISC DHCP 1.0 - 4.4.3, ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16-P1 a system with access to a DHCP server, sending DHCP packets crafted to include fqdn labels longer than 63 bytes, could eventually cause the server to run out of memory...

DEBIAN-CVE-2022-2928

In ISC DHCP 4.4.0 - 4.4.3, ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16-P1, when the function optioncodehashlookup is called from addoption, it increases the option's refcount field. However, there is not a corresponding call to optiondereference to decrement the refcount field. The function addoption is on...

USN-5658-1 isc-dhcp vulnerabilities

It was discovered that DHCP incorrectly handled option reference counting. A remote attacker could possibly use this issue to cause DHCP servers to crash, resulting in a denial of service. CVE-2022-2928 It was discovered that DHCP incorrectly handled certain memory operations. A remote attacker...

CVE-2022-2928

In ISC DHCP 4.4.0 - 4.4.3, ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16-P1, when the function optioncodehashlookup is called from addoption, it increases the option's refcount field. However, there is not a corresponding call to optiondereference to decrement the refcount field. The function addoption is on...

CVE-2022-20847

A vulnerability in the DHCP processing functionality of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to the improper processing of DHCP messages. An...

多款Cisco产品 资源管理错误漏洞

Cisco IOS XE Software and Cisco Catalyst 9000 are both products of Cisco, Inc.Cisco IOS XE Software is an operating system. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. The Cisco Catalyst 9000...

PT-2022-6090 · Cisco · Cisco Ios Xe Wireless Controller +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family affected versions not specified Description: A vulnerability in the DHCP processing functionality could allow an unauthenticated, remote attacker to cause a denial of...

The vulnerability of DHCP option 82 for Cisco IOS and Cisco IOS XE operating systems allows a attacker to trigger a device reboot or cause a service failure.

The vulnerability of DHCP option 82 for Cisco IOS and Cisco IOS XE operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause a service failure using a specially crafted DHCPv4 packet...

The vulnerability affects Cisco IOS and Cisco IOS XE operating systems via DHCP options. It allows a malicious actor to trigger a device reboot or cause a service failure.

The vulnerability of Cisco IOS and Cisco IOS XE DHCP-enabled operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause a service failure using a specially crafted DHCPv4 packet...