Skip to content
OpenAdvisories
High ELSA-2021-2357 1 CVE

Important: dhcp security update (Oracle Linux 7)

Published Jun 10, 2021 · Updated Jun 10, 2021

Ecosystem: Oracle Linux

Summary

[12:4.2.5-83.0.1]
- Direct users to Oracle Linux support site.

[12:4.2.5-83.1]
- Fix for CVE-2021-25217

[12:4.2.5-83]
- Revert fix for 1668696

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 7 dhclient 12:4.2.5-83.0.1.el7_9.1
Oracle Linux · 7 dhcp 12:4.2.5-83.0.1.el7_9.1
Oracle Linux · 7 dhcp-common 12:4.2.5-83.0.1.el7_9.1
Oracle Linux · 7 dhcp-devel 12:4.2.5-83.0.1.el7_9.1
Oracle Linux · 7 dhcp-libs 12:4.2.5-83.0.1.el7_9.1

Vulnerabilities 1

  • High 7.4
    CVE-2021-25217

    A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient

    In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series) are beyond their End-of-Life (EOL) and no longer supported by ISC. From inspection it is …

    ISC ISC DHCP isc-dhcp isc-dhcp Debian Ubuntu Azure Linux Alpine