Description
Dibbler 0.6.0 does not verify that certain length parameters are appropriate for buffer sizes, which allows remote attackers to trigger a buffer over-read and cause a denial of service (daemon crash), as demonstrated by incorrect behavior of the TSrvMsg constructor in SrvMessages/SrvMsg.cpp when (1) reading the option code and option length and (2) parsing options.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | dibbler | 0.6.1-1 | — |
| Debian 12 | dibbler | 0.6.1-1 | — |
References
- 20070918 [MU-200709-02] Dibbler Remote Denial of Service Vulnerability mailing-list
- dibbler-invalidoption-dos(36685) vdb-entry
- 26876 third-party-advisory
- http://klub.com.pl/dhcpv6/
- http://labs.musecurity.com/wp-content/uploads/2007/09/mu-200709-02.txt
- 40569 vdb-entry
- 25726 vdb-entry