Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:0481-1

Опубликовано: 16 фев. 2016
Источник: suse-cvrf

Описание

Security update for dhcp

This update for dhcp fixes the following issues:

  • CVE-2015-8605: A remote attacker could have used badly formed packets with an invalid IPv4 UDP length field to cause a DHCP server, client, or relay program to terminate abnormally (bsc#961305)

The following bugs were fixed:

  • bsc#936923: Improper lease duration checking
  • bsc#880984: Integer overflows in the date and time handling code
  • bsc#947780: DHCP server could abort with 'Unable to set up timer: out of range' on very long or infinite timer intervals / lease lifetimes
  • bsc#926159: DHCP preferrend and valid lifetime would be logged incorrectly
  • bsc#928390: dhclient dit not expose next-server DHCPv4 option to script
  • bsc#926159: DHCP preferrend and valid lifetime would be logged incorrectly

Список пакетов

SUSE Linux Enterprise Desktop 11 SP3
dhcp-4.2.4.P2-0.24.1
dhcp-client-4.2.4.P2-0.24.1
SUSE Linux Enterprise Desktop 11 SP4
dhcp-4.2.4.P2-0.24.1
dhcp-client-4.2.4.P2-0.24.1
SUSE Linux Enterprise Server 11 SP3
dhcp-4.2.4.P2-0.24.1
dhcp-client-4.2.4.P2-0.24.1
dhcp-relay-4.2.4.P2-0.24.1
dhcp-server-4.2.4.P2-0.24.1
SUSE Linux Enterprise Server 11 SP3-TERADATA
dhcp-4.2.4.P2-0.24.1
dhcp-client-4.2.4.P2-0.24.1
dhcp-relay-4.2.4.P2-0.24.1
dhcp-server-4.2.4.P2-0.24.1
SUSE Linux Enterprise Server 11 SP4
dhcp-4.2.4.P2-0.24.1
dhcp-client-4.2.4.P2-0.24.1
dhcp-relay-4.2.4.P2-0.24.1
dhcp-server-4.2.4.P2-0.24.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3
dhcp-4.2.4.P2-0.24.1
dhcp-client-4.2.4.P2-0.24.1
dhcp-relay-4.2.4.P2-0.24.1
dhcp-server-4.2.4.P2-0.24.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
dhcp-4.2.4.P2-0.24.1
dhcp-client-4.2.4.P2-0.24.1
dhcp-relay-4.2.4.P2-0.24.1
dhcp-server-4.2.4.P2-0.24.1
SUSE Linux Enterprise Software Development Kit 11 SP3
dhcp-devel-4.2.4.P2-0.24.1
SUSE Linux Enterprise Software Development Kit 11 SP4
dhcp-devel-4.2.4.P2-0.24.1

Ссылки

Описание

ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.

Затронутые продукты
SUSE Linux Enterprise Desktop 11 SP3:dhcp-4.2.4.P2-0.24.1
SUSE Linux Enterprise Desktop 11 SP3:dhcp-client-4.2.4.P2-0.24.1
SUSE Linux Enterprise Desktop 11 SP4:dhcp-4.2.4.P2-0.24.1
SUSE Linux Enterprise Desktop 11 SP4:dhcp-client-4.2.4.P2-0.24.1
Ссылки
Уязвимость SUSE-SU-2016:0481-1