Skip to content
OpenAdvisories
High ELSA-2021-2359 1 CVE

Important: dhcp security update (Oracle Linux 8)

Published Jun 10, 2021 · Updated Jun 10, 2021

Ecosystem: Oracle Linux

Summary

[12:4.3.6-44.1]
- Fix for CVE-2021-25217

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 8 dhcp-client 12:4.3.6-44.el8_4.1
Oracle Linux · 8 dhcp-common 12:4.3.6-44.el8_4.1
Oracle Linux · 8 dhcp-libs 12:4.3.6-44.el8_4.1
Oracle Linux · 8 dhcp-relay 12:4.3.6-44.el8_4.1
Oracle Linux · 8 dhcp-server 12:4.3.6-44.el8_4.1

Vulnerabilities 1

  • High 7.4
    CVE-2021-25217

    A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient

    In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series) are beyond their End-of-Life (EOL) and no longer supported by ISC. From inspection it is …

    ISC ISC DHCP isc-dhcp isc-dhcp Debian Ubuntu Azure Linux Alpine