Mageia: Security Advisory (MGASA-2016-0034)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security fix for the ALT Linux 8 package dhcpcd version 1:6.10.1-alt1

Jan. 25, 2016 Mikhail Efremov 1:6.10.1-alt1 - Patches from upstream: + Don't allow blank hostname. + Fix CVE-2014-7913. - Drop obsoleted patch. - Updated to 6.10.1...

dhcpcd -- remote code execution/denial of service

MITRE reports: The printoption function in dhcp-common.c in dhcpcd through 6.9.1, as used in dhcp.c in dhcpcd 5.x in Android before 5.1 and other products, misinterprets the return value of the snprintf function, which allows remote DHCP servers to execute arbitrary code or cause a denial of...

MGASA-2016-0034 Updated dhcpcd packages fix security vulnerability

Possible heap overflow in dhcpcd before 6.10.0 caused by malformed dhcp responses due to incorrect option length values CVE-2016-1503. Possible invalid read in dhcpcd before 6.10.0 caused by malformed dhcp responses can lead to a crash CVE-2016-1504. The dhcpcd package has been updated to version...

Updated dhcpcd packages fix security vulnerability

Possible heap overflow in dhcpcd before 6.10.0 caused by malformed dhcp responses due to incorrect option length values CVE-2016-1503. Possible invalid read in dhcpcd before 6.10.0 caused by malformed dhcp responses can lead to a crash CVE-2016-1504. The dhcpcd package has been updated to version...

Security fix for the ALT Linux 7 package dhcpcd version 1:5.6.8-alt2.M70P.1

1:5.6.8-alt2.M70P.1 built Jan. 19, 2016 Mikhail Efremov in task 156100 Jan. 18, 2016 Mikhail Efremov - Ensure that length of the DHCP option's data less then buffer size. - Fix CVE-2014-6060...

dhcpcd Heap Buffer Overflow Vulnerability

dhcpcd is a set of RFC2131 and RFC1541 compliant DHCP client daemons that are used to auto-configure IPv4 networks. A heap buffer overflow vulnerability exists in dhcpcd, which allows attackers to exploit the vulnerability to crash an application and conduct denial-of-service attacks...

dhcpcd Remote Denial of Service Vulnerability (CNVD-2016-00349)

dhcpcd is a set of RFC2131 and RFC1541 compliant DHCP client daemons that are used to auto-configure IPv4 networks. A security vulnerability exists in dhcpcd that allows an attacker to conduct denial-of-service attacks by exploiting the vulnerability to crash applications...

dhcpcd: denial of service

CVE-2016-1503 denial of service An issue has been discovered that can lead to a heap overflow via malformed dhcp responses later in printoption via dhcpenvoption1 due to incorrect option length values. - CVE-2016-1504 denial of service A malformed dhcp response can lead to an invalid read/crash...

FreeBSD : dhcpcd -- multiple vulnerabilities (df587aa2-b5a5-11e5-9728-002590263bf5)

Nico Golde reports : heap overflow via malformed dhcp responses later in printoption via dhcpenvoption1 due to incorrect option length values. Exploitation is non-trivial, but I'd love to be proven wrong. invalid read/crash via malformed dhcp responses. not exploitable beyond DoS as far as I can...

dhcpcd -- multiple vulnerabilities

Nico Golde reports: heap overflow via malformed dhcp responses later in printoption via dhcpenvoption1 due to incorrect option length values. Exploitation is non-trivial, but I'd love to be proven wrong. invalid read/crash via malformed dhcp responses. not exploitable beyond DoS as far as I can...

Debian DLA-362-1 : dhcpcd security update

Guido Vranken discovered several memory-related vulnerabilities while fuzzing DHCP messages sent to dhcpcd. For Debian 6 'Squeeze', those issues have been fixed in version 1:3.2.3-5+squeeze2. CVE-2012-6698 Out-of-bounds write with specially crafted DHCP messages. CVE-2012-6699 Out-of-bounds read...

[SECURITY] [DLA 362-1] dhcpcd security update

Package : dhcpcd Version : 1:3.2.3-5+squeeze2 CVE ID : CVE-2012-6698 CVE-2012-6699 CVE-2012-6700 Guido Vranken discovered several memory-related vulnerabilities while fuzzing DHCP messages sent to dhcpcd. For Debian 6 “Squeeze”, those issues have been fixed in version 1:3.2.3-5+squeeze2...

DLA-362-1 dhcpcd - security update

Bulletin has no description...

SUSE-SU-2015:2174-1 Security update for dhcpcd

dhcpcd was updated to fix three security issues. These security issues were fixed: - CVE-2012-6698: A potential out of bounds write was fixed, which could lead to memory corruption, triggerable by network local attackers. - CVE-2012-6699: A loop error was fixed that could lead out of bound reads,...

SUSE SLED11 / SLES11 Security Update : dhcpcd (SUSE-SU-2015:2174-1)

dhcpcd was updated to fix one security issue. This security issue was fixed : - A missing length check in decodesearch could have caused DOS bsc955762. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted ...

Gentoo Security Advisory GLSA 201409-03

Gentoo Linux Local Security Checks GLSA 201409-03 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Gentoo Security Advisory GLSA 201301-04

Gentoo Linux Local Security Checks GLSA 201301-04 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2014-7912

The getoption function in dhcp.c in dhcpcd before 6.2.0, as used in dhcpcd 5.x in Android before 5.1 and other products, does not validate the relationship between length fields and the amount of data, which allows remote DHCP servers to execute arbitrary code or cause a denial of service memory...

Memory corruption

The getoption function in dhcp.c in dhcpcd before 6.2.0, as used in dhcpcd 5.x in Android before 5.1 and other products, does not validate the relationship between length fields and the amount of data, which allows remote DHCP servers to execute arbitrary code or cause a denial of service memory...