Updated dhcpcd package fixes security vulnerability

In dhcpcd before 6.4.3, a specially crafted packet received from a malicious DHCP server caused dhcpcd to enter an infinite loop, causing a denial of service...

MGASA-2014-0334 Updated dhcpcd package fixes security vulnerability

In dhcpcd before 6.4.3, a specially crafted packet received from a malicious DHCP server caused dhcpcd to enter an infinite loop, causing a denial of service...

[slackware-security] dhcpcd (SSA:2014-213-02)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security dhcpcd SSA:2014-213-02 New dhcpcd packages are available for Slackware 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+...

dhcpcd DoS

Infinite loop on server response parsing...

Slackware 13.1 / 13.37 / 14.0 / 14.1 / current : dhcpcd (SSA:2014-213-02)

New dhcpcd packages are available for Slackware 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2014-213-02. The text itself i...

[slackware-security] dhcpcd

New dhcpcd packages are available for Slackware 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/dhcpcd-6.0.5-i486-3slack14.1.txz: Rebuilt. This update fixes a security issue where a specially crafted packet...

openSUSE Security Update : dhcpcd (openSUSE-SU-2011:0352-1)

A rogue dhcp server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the dhcp client needs to sanitize the host name offered by the server CVE-2011-0997. %NASLMINLEVEL 70300 C...

openSUSE Security Update : dhcpcd (openSUSE-SU-2011:0385-1)

A rogue dhcp server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the dhcp client needs to sanitize the host name offered by the server CVE-2011-0996. Note this update is...

openSUSE Security Update : dhcpcd (openSUSE-SU-2011:0352-1)

A rogue dhcp server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the dhcp client needs to sanitize the host name offered by the server CVE-2011-0996. This update also fixes...

SuSE 11.1 Security Update : dhcpcd (SAT Patch Number 6301)

A stack overflow in dhcpcd was fixed which could be used by network local attackers to crash the dhcpcd and so causing loss of DHCP functionality. CVE-2012-2152 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

dhcpcd: Arbitrary code execution

Background dhcpcd is a fully featured, yet light weight RFC2131 compliant DHCP client. Description A vulnerability has been discovered in dhcpcd. Please review the CVE identifier referenced below for details. Impact The vulnerability might allow an attacker to execute arbitrary code on the DHCP...

GLSA-201301-04 : dhcpcd: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201301-04 dhcpcd: Arbitrary code execution A vulnerability has been discovered in dhcpcd. Please review the CVE identifier referenced below for details. Impact : The vulnerability might allow an attacker to execute arbitrary code ...

Slackware Advisory SSA:2005-255-01 dhcpcd DoS

The remote host is missing an update as announced via advisory SSA:2005-255-01. OpenVAS Vulnerability Test $Id: esoftslkssa200525501.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware: Security Advisory (SSA:2005-255-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2011-210-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Advisory SSA:2011-210-02 dhcpcd

The remote host is missing an update as announced via advisory SSA:2011-210-02. OpenVAS Vulnerability Test $Id: esoftslkssa201121002.nasl 6581 2017-07-06 13:58:51Z cfischer $ Description: Auto-generated from advisory SSA:2011-210-02 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2498-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2498-1 (dhcpcd)

The remote host is missing an update to dhcpcd announced via advisory DSA 2498-1. OpenVAS Vulnerability Test $Id: deb24981.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2498-1 dhcpcd Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Dhcpcd Packet Size Stack Buffer Overflow (CVE-2012-2152)

A stack buffer overflow vulnerability has been reported in dhcpcd...

CVE-2012-2152

Stack-based buffer overflow in the getpacket method in socket.c in dhcpcd 3.2.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long packet...