REDHAT-BUG-2508081: Buffer Overflow
A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI (Open Management Application Programming Interface) port, especially if not secured with TSIG (Transaction Signature) key authentication, could send a specially crafted lease creation request. This request, containing an overly long InfiniBand MAC address, triggers a buffer overflow in the printhwaddr() function. Successful exploitation leads to a persistent denial of service (DoS), causing the dhcpd service to crash and preventing it from restarting without manual intervention.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running dhcp-server are exposed if an attacker can reach the OMAPI port. Risk is especially high when OMAPI is not protected with TSIG key authentication.
What access does an attacker need to trigger the denial of service?
The attacker needs network access to the OMAPI interface and must be able to send a crafted lease creation request containing an overly long InfiniBand MAC address.
What can be done if an update cannot be applied immediately?
Restrict network access to the OMAPI port and secure OMAPI with TSIG key authentication. These measures reduce the ability of remote attackers to submit the malicious request.
What is the operational impact after exploitation?
The dhcpd service crashes and does not restart without manual intervention, resulting in a persistent denial of service.