Описание
Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response.
Ссылки
- PatchThird Party AdvisoryUS Government Resource
- PatchVendor Advisory
- US Government Resource
- PatchVendor Advisory
- PatchVendor Advisory
- PatchThird Party AdvisoryUS Government Resource
- PatchVendor Advisory
- US Government Resource
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:isc:dhcpd:3.0:*:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0.1:rc1:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0.1:rc2:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0.1:rc3:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0.1:rc4:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0.1:rc5:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0.1:rc6:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0.1:rc7:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0.1:rc8:*:*:*:*:*:*
EPSS
Процентиль: 97%
0.37653
Средний
10 Critical
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
debian
около 23 лет назад
Format string vulnerabilities in the logging routines for dynamic DNS ...
github
больше 3 лет назад
Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response.
EPSS
Процентиль: 97%
0.37653
Средний
10 Critical
CVSS2
Дефекты
NVD-CWE-Other