CVE-2009-0692

Synopsis Critical: dhcp security update Type/Severity Security Advisory: Critical Topic Updated dhcp packages that fix a security issue are now available for RedHat Enterprise Linux 4 and 47 Extended Update SupportThis update has been rated as having critical security impact by the RedHat Security Respons ...

Synopsis Critical: dhcp security update Type/Severity Security Advisory: Critical Topic Updated dhcp packages that fix two security issues are now available forRed Hat Enterprise Linux 3This update has been rated as having critical security impact by the RedHat Security Response Team Description ...

It was discovered that the DHCP client as included in dhcp3 did not verify the length of certain option fields when processing a response from an IPv4 dhcp server If a user running Ubuntu 606 LTS or 804 LTS connected to a malicious dhcp server, a remote attacker could cause a denial of service or execute arbitrary code as the user invoking the p ...

USN-803-1 fixed a vulnerability in Dhcp Due to an error, the patch to fix the vulnerability was not properly applied on Ubuntu 810 and higher Even with the patch improperly applied, the default compiler options reduced the vulnerability to a denial of service Additionally, in Ubuntu 904 and higher, users were also protected by the AppArmor dhc ...

Several remote vulnerabilities have been discovered in ISC's DHCP implementation: CVE-2009-0692 It was discovered that dhclient does not properly handle overlong subnet mask options, leading to a stack-based buffer overflow and possible arbitrary code execution CVE-2009-1892 Christoph Biedl discovered that the DHCP server may terminate when recei ...