ALT-PU-2022-2839

Низкий

ALT-PU-2022-2839: package dhcp update to version 4.4.3.P1-alt1

Источник

errata.altlinux.org

Дата публикации

13.10.2022

Дата обновления

13.10.2022

Устраненные уязвимости

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades dhcp to version 4.4.3.P1-alt1.

Устраненные уязвимости2

CVE-2022-2928

Средний 6.5

Дата публикации: 07.10.2022

CWE-476

In ISC DHCP 4.4.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called from add_option(), it increases the option's refcount field. However, there is not a corresponding call to option_dereference() to decrement the refcount field. The function add_option() is only used in server responses to lease query packets. Each lease query response calls this function for several options, so eventually, the reference counters could overflow and cause the server to abort.

CVSS 3.1

Средний 6.5

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector: Adjacent_network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

Ссылки

CVE-2022-2928 https://nvd.nist.gov/vuln/detail/CVE-2022-2928

Ссылки1

ALT-PU-2022-2839 https://errata.altlinux.org/ALT-PU-2022-2839

Связанные уязвимости

SUSE-SU-2022:3992-1

suse-cvrf

почти 4 года назад

Security update for dhcp

SUSE-SU-2022:3991-1

suse-cvrf

почти 4 года назад

Security update for dhcp

ELSA-2023-3000

oracle-oval

больше 3 лет назад

ELSA-2023-3000: dhcp security and bug fix update (MODERATE)

ELSA-2023-2502

oracle-oval

больше 3 лет назад

ELSA-2023-2502: dhcp security and enhancement update (MODERATE)

ALT-PU-2022-2744

CVSS3: 6.5

altlinux

около 4 лет назад

ALT-PU-2022-2744: package `dhcp` update to version 4.4.3.P1-alt1