Description
An issue was discovered in dhclient 4.3.1-6 due to an embedded path variable.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| isc-dhcp | isc-dhcp | 4.3.1-6 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | isc-dhcp | 4.2.4-3 | — |
| Debian 12 | isc-dhcp | 4.2.4-3 | — |
References
- https://security-tracker.debian.org/tracker/CVE-2012-2248
- http://www.openwall.com/lists/oss-security/2012/10/18/19
- http://www.openwall.com/lists/oss-security/2012/10/15/1
- http://www.openwall.com/lists/oss-security/2012/10/17/13
- http://www.openwall.com/lists/oss-security/2012/10/17/14
- http://www.openwall.com/lists/oss-security/2012/10/18/1
- http://www.openwall.com/lists/oss-security/2012/10/18/15
- http://www.openwall.com/lists/oss-security/2012/10/18/16
- http://www.openwall.com/lists/oss-security/2012/10/18/17
- http://www.openwall.com/lists/oss-security/2012/10/18/18
- http://www.openwall.com/lists/oss-security/2012/10/18/2
- http://www.openwall.com/lists/oss-security/2012/10/18/3
- http://www.openwall.com/lists/oss-security/2012/10/21/1