Skip to content
OpenAdvisories
Medium RHSA-2019:2060 1 CVE

Red Hat Security Advisory: dhcp security and bug fix update

Published Sep 16, 2024 · Updated Jun 26, 2026

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client dhclient 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::client dhcp 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::client dhcp-common 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::client dhcp-debuginfo 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::client dhcp-devel 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::client dhcp-libs 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode dhclient 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode dhcp 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode dhcp-common 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode dhcp-debuginfo 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode dhcp-devel 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode dhcp-libs 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::server dhclient 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::server dhcp 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::server dhcp-common 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::server dhcp-debuginfo 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::server dhcp-devel 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::server dhcp-libs 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation dhclient 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation dhcp 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation dhcp-common 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation dhcp-debuginfo 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation dhcp-devel 12:4.2.5-77.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation dhcp-libs 12:4.2.5-77.el7

Vulnerabilities 1

  • Medium 6.5

    dhcpd: use-after-free error leads crash in IPv6 mode when using mismatched BIND libraries

    There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevente…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1574292
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1613174
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1623792
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1672308
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1677382
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1708641
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2060.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-6470
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-6470
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-6470
  • article
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=896122