Skip to content
OpenAdvisories
Critical ELSA-2018-1453 1 CVE

Critical: dhcp security update (Oracle Linux 7)

Published May 15, 2018 · Updated May 15, 2018

Summary

[12:4.2.5-68.0.1.1]
- Direct users to Oracle Linux support site.

[12:4.2.5-68.1]
- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 7 dhclient 12:4.2.5-68.0.1.el7_5.1
Oracle Linux · 7 dhcp 12:4.2.5-68.0.1.el7_5.1
Oracle Linux · 7 dhcp-common 12:4.2.5-68.0.1.el7_5.1
Oracle Linux · 7 dhcp-devel 12:4.2.5-68.0.1.el7_5.1
Oracle Linux · 7 dhcp-libs 12:4.2.5-68.0.1.el7_5.1

Vulnerabilities 1

  • High 7.5
    CVE-2018-1111 Public exploit EPSS 98%

    DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in…