Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:0810-2

Опубликовано: 26 мар. 2018
Источник: suse-cvrf

Описание

Security update for dhcp

This update for dhcp fixes the following issues:

Security issues fixed:

  • CVE-2018-5733: reference count overflow in dhcpd (bsc#1083303).
  • CVE-2018-5732: buffer overflow in dhclient (bsc#1083302).

Список пакетов

SUSE Linux Enterprise Point of Sale 11 SP3
dhcp-4.2.4.P2-0.28.8.1
dhcp-client-4.2.4.P2-0.28.8.1
dhcp-relay-4.2.4.P2-0.28.8.1
dhcp-server-4.2.4.P2-0.28.8.1
SUSE Linux Enterprise Server 11 SP3-LTSS
dhcp-4.2.4.P2-0.28.8.1
dhcp-client-4.2.4.P2-0.28.8.1
dhcp-relay-4.2.4.P2-0.28.8.1
dhcp-server-4.2.4.P2-0.28.8.1
SUSE Linux Enterprise Server 11 SP3-TERADATA
dhcp-4.2.4.P2-0.28.8.1
dhcp-client-4.2.4.P2-0.28.8.1
dhcp-relay-4.2.4.P2-0.28.8.1
dhcp-server-4.2.4.P2-0.28.8.1

Ссылки

Описание

Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a response containing a specially constructed options section. Affects ISC DHCP versions 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0

Затронутые продукты
SUSE Linux Enterprise Point of Sale 11 SP3:dhcp-4.2.4.P2-0.28.8.1
SUSE Linux Enterprise Point of Sale 11 SP3:dhcp-client-4.2.4.P2-0.28.8.1
SUSE Linux Enterprise Point of Sale 11 SP3:dhcp-relay-4.2.4.P2-0.28.8.1
SUSE Linux Enterprise Point of Sale 11 SP3:dhcp-server-4.2.4.P2-0.28.8.1
Ссылки

Описание

A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0.

Затронутые продукты
SUSE Linux Enterprise Point of Sale 11 SP3:dhcp-4.2.4.P2-0.28.8.1
SUSE Linux Enterprise Point of Sale 11 SP3:dhcp-client-4.2.4.P2-0.28.8.1
SUSE Linux Enterprise Point of Sale 11 SP3:dhcp-relay-4.2.4.P2-0.28.8.1
SUSE Linux Enterprise Point of Sale 11 SP3:dhcp-server-4.2.4.P2-0.28.8.1
Ссылки