RHSA-2009:1136: Critical: dhcp security update
The Dynamic Host Configuration Protocol (DHCP) is a protocol that allowsindividual devices on an IP network to get their own network configurationinformation, including an IP address, a subnet mask, and a broadcastaddress.The Mandriva Linux Engineering Team discovered a stack-based bufferoverflow flaw in the ISC DHCP client. If the DHCP client were to receive amalicious DHCP response, it could crash or execute arbitrary code with thepermissions of the client (root). (CVE-2009-0692)Users of DHCP should upgrade to these updated packages, which contain abackported patch to correct this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2009:1136?
The severity of RHSA-2009:1136 is classified as critical.
How do I fix RHSA-2009:1136?
To fix RHSA-2009:1136, update to the fixed packages provided by Red Hat, such as dhcp 3.0.1-65.el4_8.1.
Which packages are affected by RHSA-2009:1136?
Affected packages include dhcp, dhclient, and dhcp-devel prior to version 3.0.1-65.el4_8.1.
What vulnerabilities does RHSA-2009:1136 address?
RHSA-2009:1136 addresses vulnerabilities related to the Dynamic Host Configuration Protocol (DHCP).
Is RHSA-2009:1136 applicable to RHEL 4?
Yes, RHSA-2009:1136 is applicable to Red Hat Enterprise Linux 4.