Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:0541-1

Опубликовано: 22 фев. 2016
Источник: suse-cvrf

Описание

Security update for dhcp

This update for dhcp fixes the following issues:

  • CVE-2015-8605: A remote attacker could have used badly formed packets with an invalid IPv4 UDP length field to cause a DHCP server, client, or relay program to terminate abnormally (bsc#961305)

The following bugs were fixed:

  • bsc#936923: Improper lease duration checking
  • bsc#880984: Integer overflows in the date and time handling code
  • bsc#956159: fixed service files to start dhcpd after slapd
  • bsc#960506: Improve exit reason and logging when /sbin/dhclient-script is unable to pre-init requested interface

Список пакетов

SUSE Linux Enterprise Desktop 12 SP1
dhcp-4.3.3-4.1
dhcp-client-4.3.3-4.1
SUSE Linux Enterprise Server 12 SP1
dhcp-4.3.3-4.1
dhcp-client-4.3.3-4.1
dhcp-relay-4.3.3-4.1
dhcp-server-4.3.3-4.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
dhcp-4.3.3-4.1
dhcp-client-4.3.3-4.1
dhcp-relay-4.3.3-4.1
dhcp-server-4.3.3-4.1
SUSE Linux Enterprise Software Development Kit 12 SP1
dhcp-devel-4.3.3-4.1

Ссылки

Описание

ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:dhcp-4.3.3-4.1
SUSE Linux Enterprise Desktop 12 SP1:dhcp-client-4.3.3-4.1
SUSE Linux Enterprise Server 12 SP1:dhcp-4.3.3-4.1
SUSE Linux Enterprise Server 12 SP1:dhcp-client-4.3.3-4.1
Ссылки