Skip to content
OpenAdvisories
Unscored RHSA-2009:1154 2 CVEs

Red Hat Security Advisory: dhcp security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as dhclient 7:3.0.1-10.2_EL3
Red Hat · RHEL 3 enterprise_linux:3::as dhcp 7:3.0.1-10.2_EL3
Red Hat · RHEL 3 enterprise_linux:3::as dhcp-debuginfo 7:3.0.1-10.2_EL3
Red Hat · RHEL 3 enterprise_linux:3::as dhcp-devel 7:3.0.1-10.2_EL3
Red Hat · RHEL 3 enterprise_linux:3::desktop dhclient 7:3.0.1-10.2_EL3
Red Hat · RHEL 3 enterprise_linux:3::desktop dhcp 7:3.0.1-10.2_EL3
Red Hat · RHEL 3 enterprise_linux:3::desktop dhcp-debuginfo 7:3.0.1-10.2_EL3
Red Hat · RHEL 3 enterprise_linux:3::desktop dhcp-devel 7:3.0.1-10.2_EL3
Red Hat · RHEL 3 enterprise_linux:3::es dhclient 7:3.0.1-10.2_EL3
Red Hat · RHEL 3 enterprise_linux:3::es dhcp 7:3.0.1-10.2_EL3
Red Hat · RHEL 3 enterprise_linux:3::es dhcp-debuginfo 7:3.0.1-10.2_EL3
Red Hat · RHEL 3 enterprise_linux:3::es dhcp-devel 7:3.0.1-10.2_EL3
Red Hat · RHEL 3 enterprise_linux:3::ws dhclient 7:3.0.1-10.2_EL3
Red Hat · RHEL 3 enterprise_linux:3::ws dhcp 7:3.0.1-10.2_EL3
Red Hat · RHEL 3 enterprise_linux:3::ws dhcp-debuginfo 7:3.0.1-10.2_EL3
Red Hat · RHEL 3 enterprise_linux:3::ws dhcp-devel 7:3.0.1-10.2_EL3

Vulnerabilities 2

  • Unscored —
    CVE-2009-0692 Public exploit EPSS 26%

    Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.…

  • Unscored —
    CVE-2009-1893

    The configtest function in the Red Hat dhcpd init script for DHCP 3.0.1 in Red Hat Enterprise Linux (RHEL) 3 allows loc…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=507717
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=510024
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1154.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-0692
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0692
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0692
  • report
    https://access.redhat.com/security/cve/CVE-2009-1893
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1893
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1893