Skip to content
OpenAdvisories
Medium RHSA-2019:3525 1 CVE

Red Hat Security Advisory: dhcp security and bug fix update

Published Sep 16, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::baseos dhcp 12:4.3.6-34.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos dhcp-client 12:4.3.6-34.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos dhcp-client-debuginfo 12:4.3.6-34.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos dhcp-common 12:4.3.6-34.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos dhcp-debuginfo 12:4.3.6-34.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos dhcp-debugsource 12:4.3.6-34.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos dhcp-libs 12:4.3.6-34.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos dhcp-libs-debuginfo 12:4.3.6-34.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos dhcp-relay 12:4.3.6-34.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos dhcp-relay-debuginfo 12:4.3.6-34.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos dhcp-server 12:4.3.6-34.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos dhcp-server-debuginfo 12:4.3.6-34.el8

Vulnerabilities 1

  • Medium 6.5
    CVE-2019-6470

    dhcpd: use-after-free error leads crash in IPv6 mode when using mismatched BIND libraries

    There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevente…

    Multiple, non-ISC dhcpd bind isc-dhcp Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1660865
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1685560
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1708641
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3525.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-6470
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-6470
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-6470
  • article
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=896122