CVE-2007-0062: Buffer Overflow
Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528; allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a malformed DHCP packet with a large dhcp-max-message-size that triggers a stack-based buffer overflow, related to servers configured to send many DHCP options to clients.
Other sources
ISC dhcpd is prone to denial of service attack (daemon crash) when DHCP client specifies large value for dhcp-max-message-size in the request.
Problem only occurs when dhcpd is configured to provide clients with very large amount of DHCP options. Such configurations seems very unlikely to exist in the real deployments.
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0062?
CVE-2007-0062 has a high severity rating due to the potential for remote code execution.
How do I fix CVE-2007-0062?
To fix CVE-2007-0062, update the affected ISC dhcpd or VMware software to the latest versions as recommended by their release notes.
Which software is affected by CVE-2007-0062?
CVE-2007-0062 affects ISC dhcpd versions before 3.0.7 and various VMware products, including VMware Workstation and Player.
What type of attack is CVE-2007-0062 associated with?
CVE-2007-0062 is associated with integer overflow vulnerabilities that can lead to remote code execution.
Are there any known exploits for CVE-2007-0062?
Yes, there are known exploits that take advantage of the integer overflow vulnerability in CVE-2007-0062.