Описание
A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI (Open Management Application Programming Interface) port, especially if not secured with TSIG (Transaction Signature) key authentication, could send a specially crafted lease creation request. This request, containing an overly long InfiniBand MAC address, triggers a buffer overflow in the print_hw_addr() function. Successful exploitation leads to a persistent denial of service (DoS), causing the dhcpd service to crash and preventing it from restarting without manual intervention.
Отчет
This flaw has Moderate impact. A buffer overflow in the dhcpd service, exploitable via the OMAPI port (7911), can lead to a persistent denial of service. Exploitation requires network access to the OMAPI port, and if TSIG key authentication is not configured, no further credentials are needed. Successful exploitation crashes the dhcpd service, preventing its restart without manual intervention.
Меры по смягчению последствий
To mitigate this issue, secure OMAPI access by configuring TSIG key authentication to prevent unauthorized connections to the OMAPI port (7911). If the dhcpd service has already crashed due to this flaw, manually remove the problematic InfiniBand lease entry from /var/lib/dhcpd/dhcpd.leases and then restart the dhcpd service. Restarting the dhcpd service may temporarily interrupt DHCP services for clients.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | dhcp | Fix deferred | ||
| Red Hat Enterprise Linux 7 | dhcp | Fix deferred | ||
| Red Hat Enterprise Linux 8 | dhcp | Fix deferred | ||
| Red Hat Enterprise Linux 9 | dhcp | Affected |
Показывать по
Дополнительная информация
Статус:
4.9 Medium
CVSS3
Связанные уязвимости
(A flaw was found in dhcp-server. A remote attacker with network access ...)
A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI (Open Management Application Programming Interface) port, especially if not secured with TSIG (Transaction Signature) key authentication, could send a specially crafted lease creation request. This request, containing an overly long InfiniBand MAC address, triggers a buffer overflow in the `print_hw_addr()` function. Successful exploitation leads to a persistent denial of service (DoS), causing the `dhcpd` service to crash and preventing it from restarting without manual intervention.
A flaw was found in dhcp-server. A remote attacker with network access ...
A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI (Open Management Application Programming Interface) port, especially if not secured with TSIG (Transaction Signature) key authentication, could send a specially crafted lease creation request. This request, containing an overly long InfiniBand MAC address, triggers a buffer overflow in the `print_hw_addr()` function. Successful exploitation leads to a persistent denial of service (DoS), causing the `dhcpd` service to crash and preventing it from restarting without manual intervention.
4.9 Medium
CVSS3