dhclient, dhcp security update

CentOS Errata and Security Advisory CESA-2018:0469 An update for dhcp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

dhcp: Reference count overflow in dhcpd allows denial of service

A denial of service flaw was found in the way dhcpd handled reference counting when processing client requests. A malicious DHCP client could use this flaw to trigger a reference count overflow on the server side, potentially causing dhcpd to crash, by sending large amounts of traffic...

The vulnerability of the receive_packet function in the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the receivepacket function in the libnetutils/packet.c file of the Android operating system is related to incorrect checking of the size of the DHCP response. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code within the...

The vulnerability of the DHCP server dhcpd arises from the possibility of overflowing the 32-bit link counter, which can lead to a failure in server operation.

The vulnerability of the DHCP server dhcpd arises from the possibility of overflowing the 32-bit link counter. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause the server to fail by sending a large number of specially crafted DCHP requests...

[SECURITY] Fedora 27 Update: dhcp-4.3.6-9.fc27

DHCP Dynamic Host Configuration Protocol...

ISC DHCP Reference Counter Overflow Vulnerability

ISC DHCP is an open source software implementation of the Dynamic Host Configuration Protocol used to connect to IP networks. A reference counter overflow vulnerability exists in ISC DHCP. A remote user can trigger a reference counter overflow by sending a large amount of data to the target serve...

ISC DHCP Buffer Overflow Vulnerability

ISC DHCP is an open source software implementation of the Dynamic Host Configuration Protocol used to connect to IP networks. A buffer overflow vulnerability exists in ISC DHCP. An attacker could trigger a buffer overflow in the DHCP option processing by returning a specially crafted response fro...

ISC DHCP OMAPI Connections Denial of Service Vulnerability

ISC DHCP is the United States Internet Systems Consortium ISC, Inc. of a set of open source Dynamic Host Configuration Protocol server software. A remote denial of service vulnerability exists in ISC DHCP versions 4.1.0 through 4.1-ESV-R15, 4.2.0 through 4.2.8, and 4.3.0 through 4.3.6. A remote...

CVE-2017-13208

In receivepacket of libnetutils/packet.c, there is a possible out-of-bounds write due to a missing bounds check on the DHCP response. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation...

UBUNTU-CVE-2017-3144

A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond...

[SECURITY] Fedora 27 Update: dhcp-4.3.6-7.fc27

DHCP Dynamic Host Configuration Protocol...

[SECURITY] Fedora 26 Update: dhcp-4.3.5-10.fc26

DHCP Dynamic Host Configuration Protocol...

BSA-2017-452

Security Advisory ID : BSA-2017-452 Component : dhcp6 Revision : 2.0: Final An information leak was found in dnsmasq in the DHCPv6 relay code. An attacker on the local network could send crafted DHCPv6 packets to dnsmasq causing it to forward the contents of process memory, potentially leaking...

The vulnerability of the DHCP service in Windows operating systems allows a perpetrator to execute arbitrary code on the DHCP failure-tolerant server or cause a service failure.

The vulnerability of the DHCP service on Windows operating systems arises from an operation that goes beyond the buffer boundaries in memory memory corruption. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the DHCP failover server or cause a service failure...

DNSmasq Information Disclosure Vulnerability

DNSmasq is a small and handy tool for configuring DNS and DHCP for small networks that provides DNS functionality and optional DHCP functionality. An information disclosure vulnerability in DNSmasq 2.77 and prior versions allows remote attackers to trigger a flaw in the DHCPv6 relay code by sendi...

DEBIAN-CVE-2017-14494

dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests...

dnsmasq: stack buffer overflow in the DHCPv6 code

A stack buffer overflow was found in dnsmasq in the DHCPv6 code. An attacker on the local network could send a crafted DHCPv6 request to dnsmasq which would cause it to a crash or, potentially, execute arbitrary code...

dnsmasq: information leak in the DHCPv6 relay code

An information leak was found in dnsmasq in the DHCPv6 relay code. An attacker on the local network could send crafted DHCPv6 packets to dnsmasq causing it to forward the contents of process memory, potentially leaking sensitive data...

dnsmasq: information leak in the DHCPv6 relay code

An information leak was found in dnsmasq in the DHCPv6 relay code. An attacker on the local network could send crafted DHCPv6 packets to dnsmasq causing it to forward the contents of process memory, potentially leaking sensitive data...

CVE-2017-12240

The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system. The attacker could also cause an affected system to reload,...