CVE-2016-8229

CVE-2016-8229 refers to a cross-site request forgery in Lenovo Service Bridge (LSB) on Windows, in versions before 4. The vulnerability could be exploited by an attacker who has access to the DHCP server used by the system running LSB. Public details in the connected documents confirm the affecte...

CVE-2016-8229

A cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 could be exploited by an attacker with access to the DHCP server used by the system where LSB is installed...

[SECURITY] Fedora 23 Update: dnsmasq-2.76-1.fc23

Dnsmasq is lightweight, easy to configure DNS forwarder and DHCP server. It is designed to provide DNS and, optionally, DHCP, to a small network. It can serve the names of local machines which are not in the global DNS. The DHCP server integrates with the DNS server and allows machines with...

[SECURITY] Fedora 24 Update: dnsmasq-2.76-1.fc24

Dnsmasq is lightweight, easy to configure DNS forwarder and DHCP server. It is designed to provide DNS and, optionally, DHCP, to a small network. It can serve the names of local machines which are not in the global DNS. The DHCP server integrates with the DNS server and allows machines with...

SUSE-SU-2016:1791-1 Security update for dhcp

This update for dhcp fixes the following issues: Security issue fixed: - CVE-2016-2774: Fixed a denial of service attack against the DHCP server over the OMAPI TCP socket, which could be used by network adjacent attackers to make the DHCP server non-functional bsc969820. Non security issues fixed...

SUSE-SU-2016:1735-1 Security update for dhcp

This update for dhcp fixes the following issues: - CVE-2016-2774: Fixed a denial of service attack against the DHCP server over the OMAPI TCP socket, which could be used by network adjacent attackers to make the DHCP server non-functional bsc969820...

CVE-2012-6698

The decodesearch function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service out-of-bounds write via a crafted response...

Design/Logic Flaw

The decodesearch function in dhcp.c in dhcpcd 3.x does not properly free allocated memory, which allows remote DHCP servers to cause a denial of service via a crafted response...

CVE-2012-6700

The decodesearch function in dhcp.c in dhcpcd 3.x does not properly free allocated memory, which allows remote DHCP servers to cause a denial of service via a crafted response...

SOL30409575 - ISC DHCP vulnerability CVE-2016-2774

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

DEBIAN-CVE-2016-2774

ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to cause a denial of service INSIST assertion failure or request-processing outage by establishing many sessions...

ISC Releases Security Updates for DHCP Server

Internet Systems Consortium ISC has released security updates to address a vulnerability in versions of ISC Dynamic Host Configuration Protocol DHCP server. Exploitation of this vulnerability may allow a remote attacker to cause a denial-of-service condition. Updated versions of ISC DHCP...

openSUSE Security Update : dhcp (openSUSE-2016-279)

This update for dhcp fixes the following issues : - CVE-2015-8605: A remote attacker could have used badly formed packets with an invalid IPv4 UDP length field to cause a DHCP server, client, or relay program to terminate abnormally boo961305 The following bugs were fixed : - boo936923: Improper...

SUSE-SU-2016:0481-1 Security update for dhcp

This update for dhcp fixes the following issues: - CVE-2015-8605: A remote attacker could have used badly formed packets with an invalid IPv4 UDP length field to cause a DHCP server, client, or relay program to terminate abnormally bsc961305 The following bugs were fixed: - bsc936923: Improper...

Updated dhcp packages fix security vulnerability

A badly formed packet with an invalid IPv4 UDP length field can cause an ISC DHCP server, client, or relay program to terminate abnormally CVE-2015-8605. The dhcp package has been updated to version 4.3.3-P1, which fixes this issue and several other bugs. Also, the package has also been enhanced ...

ISC DHCP UDP IPv4 Packet Denial of Service Vulnerability

ISC DHCP is a set of open source Dynamic Host Configuration Protocol server software. A security vulnerability in ISC DHCP's handling of UDP IPv4 packets allows remote attackers to conduct denial-of-service attacks by sending UDP messages containing invalid length fields...

DEBIAN-CVE-2015-8605

ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service application crash via an invalid length field in a UDP IPv4 packet...

Debian DSA-3442-1 : isc-dhcp - security update

It was discovered that a maliciously crafted packet can crash any of the isc-dhcp applications. This includes the DHCP client, relay, and server application. Only IPv4 setups are affected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

USN-2868-1: DHCP vulnerability

Sebastian Poehn discovered that the DHCP server, client, and relay incorrectly handled certain malformed UDP packets. A remote attacker could use this issue to cause the DHCP server, client, or relay to stop responding, resulting in a denial of service...

CVE-2015-8373

The kea-dhcp4 and kea-dhcp6 servers 0.9.2 and 1.0.0-beta in ISC Kea, when certain debugging settings are used, allow remote attackers to cause a denial of service daemon crash via a malformed packet...