Multiple vulnerabilities have been discovered in ISC DHCP, the worst of which could result in denial of service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-misc/dhcp | * | < 4.4.3_p1 | >= 4.4.3_p1 |
ISC DHCP is ISC's reference implementation of all aspects of the Dynamic Host Configuration Protocol.
Multiple vulnerabilities have been discovered in ISC DHCP. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All ISC DHCP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/dhcp-4.4.3_p1"
Multiple vulnerabilities have been found in ISC DHCP, the worst of which could allow for the remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-misc/dhcp | * | < 4.3.6_p1 | >= 4.3.6_p1 |
ISC DHCP is a Dynamic Host Configuration Protocol (DHCP) client/server.
Multiple vulnerabilities have been discovered in ISC DHCP. Please review the CVE identifiers referenced below for details.
Remote attackers could execute arbitrary code, cause a Denial of Service condition, or have other unspecified impacts.
There are no known workarounds at this time for CVE-2018-5732 or CVE-2018-5733.
In accordance with upstream documentation, the recommended workaround for CVE-2017-3144 is, “to disallow access to the OMAPI control port from unauthorized clients (in accordance with best practices for server operation).”
All DHCP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/dhcp-4.3.6_p1"
A memory exhaustion vulnerability in ISC DHCP could lead to Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-misc/dhcp | * | < 4.2.5_p1 | >= 4.2.5_p1 |
ISC DHCP is a Dynamic Host Configuration Protocol (DHCP) client/server.
ISC DHCP is vulnerable to a memory exhaustion attack involving regular expressions sent by DHCP clients.
A remote attacker could send a specially crafted request from a malicious or spoofed client, potentially leading to a Denial of Service condition.
There is no known workaround at this time.
All ISC DHCP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/dhcp-4.2.5_p1"
Multiple vulnerabilities have been found in ISC DHCP, the worst of which may allow remote Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-misc/dhcp | * | < 4.2.4_p2 | >= 4.2.4_p2 |
ISC DHCP is a Dynamic Host Configuration Protocol (DHCP) client/server.
Multiple vulnerabilities have been discovered in ISC DHCP. Please review the CVE identifiers referenced below for details.
The vulnerabilities might allow remote attackers to execute arbitrary code or cause a Denial of Service.
There is no known workaround at this time.
All ISC DHCP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/dhcp-4.2.4_p2"
dhcpd as included in the ISC DHCP implementation does not properly handle special conditions, leading to a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-misc/dhcp | * | < 3.1.2_p1 | >= 3.1.2_p1 |
ISC DHCP is the reference implementation of the Dynamic Host Configuration Protocol as specified in RFC 2131.
Christoph Biedl discovered that dhcpd does not properly handle certain DHCP requests when configured both using "dhcp-client-identifier" and "hardware ethernet".
A remote attacker might send a specially crafted request to dhcpd, possibly resulting in a Denial of Service (daemon crash).
There is no known workaround at this time.
All ISC DHCP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/dhcp-3.1.2_p1"
A buffer overflow in dhclient as included in the ISC DHCP implementation allows for the remote execution of arbitrary code with root privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-misc/dhcp | * | < 3.1.1-r1 | >= 3.1.1-r1 |
ISC DHCP is the reference implementation of the Dynamic Host Configuration Protocol as specified in RFC 2131.
The Mandriva Linux Engineering Team has reported a stack-based buffer overflow in the subnet-mask handling of dhclient.
A remote attacker might set up a rogue DHCP server in a victim's local network, possibly leading to the execution of arbitrary code with root privileges.
There is no known workaround at this time.
All ISC DHCP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/dhcp-3.1.1-r1"
A Denial of Service vulnerability was discovered in ISC DHCP.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-misc/dhcp | * | < 3.1.1 | >= 3.1.1 |
ISC DHCP is ISC's reference implementation of all aspects of the Dynamic Host Configuration Protocol.
A buffer overflow error was found in ISC DHCP server, that can only be exploited under unusual server configurations where the DHCP server is configured to provide clients with a large set of DHCP options.
A remote attacker could exploit this vulnerability to cause a Denial of Service.
There is no known workaround at this time.
All ISC DHCP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/dhcp-3.1.1"