Summary
The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network.
Security Fix(es):
* dhcp-server: dhcp-server: Persistent denial of service due to buffer overflow via OMAPI (CVE-2026-18103)
Bug Fix(es) and Enhancement(s):
* dhcpd dies constantly with "Error allocating fallback interface: invalid argument" (JIRA:Rocky Linux-151420)
* Attempt to free pointer that is inside a structure in get_hw_addr2 (JIRA:Rocky Linux-235872)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.
Fixed packages 33
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 9 | dhcp-client | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-client | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-client | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-client | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-client-debuginfo | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-client-debuginfo | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-client-debuginfo | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-client-debuginfo | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-common | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-debuginfo | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-debuginfo | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-debuginfo | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-debuginfo | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-debugsource | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-debugsource | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-debugsource | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-debugsource | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-relay | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-relay | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-relay | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-relay | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-relay-debuginfo | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-relay-debuginfo | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-relay-debuginfo | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-relay-debuginfo | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-server | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-server | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-server | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-server | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-server-debuginfo | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-server-debuginfo | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-server-debuginfo | 2:4.4.2-22.b1.el9.rocky.0.1 |
| Rocky Linux · 9 | dhcp-server-debuginfo | 2:4.4.2-22.b1.el9.rocky.0.1 |
Vulnerabilities 1
-
Medium 4.9
Dhcp-server: dhcp-server: persistent denial of service due to buffer overflow via omapi
A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI (Open Management Application Programming Interface) port, especially if not secured with TSIG (Transaction Signature) key authentication, could send a specially crafted lease …