Skip to content
OpenAdvisories
Medium WID-SEC-2023-0525 2 CVEs

Internet Systems Consortium DHCP: Mehrere Schwachstellen

Published Feb 28, 2018 · Updated Feb 28, 2023 · Revision 14 · de-DE

Vendor: Debian Vendor: F5 Vendor: IBM Vendor: Internet Systems Consortium Vendor: Oracle Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: BIG-IP Product: BIG-IP 11.2.1 Product: BIG-IP 11.5.1 - 11.5.5 Product: BIG-IP 11.6.3 Product: BIG-IP 12.1.0 - 12.1.3 Product: BIG-IP 13.0.0 Product: BIG-IP 13.1.0 Product: DHCP Product: DHCP < 4.1-ESV-R15-P1 Product: DHCP < 4.3.6-P1 Product: DHCP < 4.4.1 Product: Enterprise Linux Product: Enterprise Manager 3.1.1 Product: FlashSystem Product: Linux Product: Linux Product: Linux Product: Linux Product: SAN Volume Controller Product: Storwize Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Internet Systems Consortium DHCP ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen und um einen Denial of Service Angriff durchzuführen.

Product

Internet Systems Consortium (ISC) DHCP ist eine weit verbreitete Client- und Server-Implementierung des Dynamic Host Configuration Protokolls (DHCP) unter Unix. Sie ermöglicht die automatische Verteilung von IP-Informationen, wie z.B. IP-Adresse, Netzwerkmaske, Defaultgateway vom Server zu Clients.

Vulnerabilities 2

  • High 7.5
    CVE-2018-5732

    A specially constructed response from a malicious server can cause a buffer overflow in dhclient

    Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a response containing a specially constructed …

    ISC ISC DHCP isc-dhcp isc-dhcp Debian Ubuntu Alpine
  • Medium 5.9
    CVE-2018-5733 EPSS 20%

    A malicious client can overflow a reference counter in ISC dhcpd

    A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3…

    ISC ISC DHCP isc-dhcp isc-dhcp Debian Ubuntu Alpine

Revision history

  1. #14

    Neue Updates von IBM aufgenommen

  2. #13

    New remediations available

  3. #12

    New remediations available

  4. #11

    New remediations available

  5. #9

    New remediations available

  6. #10

    Version nicht vorhanden

  7. #8

    New remediations available

  8. #7

    New remediations available

  9. #6

    New remediations available

  10. #5

    New remediations available

  11. #4

    New remediations available

  12. #3

    New remediations available

  13. #1

    Initial Release

  14. #2

    Version nicht vorhanden

References