Recently modified vulnerabilities for "isc dhcp client"

Where

Sort:

ISC DHCP clientBuffer Overflow

Risk 52

Severity

7.5

Buffer Overflow

AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial of service (crash) and possibly execute arbitrary commands via long options.

First published (updated )

CVE-1999-0808

ISC DHCPBuffer Overflow

Risk 28

Severity

4.9

Buffer Overflow

AV:N/AC:H/Au:S/C:N/I:N/A:C

libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a denial of service (memory consumption) via vectors involving a regular expression, as demonstrated by a memory-exhaustion attack against a machine running a dhcpd process, a related issue to CVE-2013-2266.

First published (updated )

CVE-2013-2494

ISC DHCP clientISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell met…

Risk 87

Severity

AV:N/AC:L/Au:N/C:C/I:C/A:C

ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters.

First published (updated )

CVE-2000-0585

ISC DHCPNull Pointer Dereference

Risk 36

Severity

6.1

Null Pointer Dereference

AV:A/AC:L/Au:N/C:N/I:N/A:C

The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS (DDNS) and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets related to a lease-status update.

First published (updated )

CVE-2011-4868

ISC DHCPInput Validation

Risk 44

Severity

7.8

Input Validation

AV:N/AC:L/Au:N/C:N/I:N/A:C

The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attackers to cause a denial of service (assertion failure and daemon crash) by sending a message over IPv6 for a declined and abandoned address.

First published (updated )

CVE-2011-0413

ISC DHCPBuffer Overflow

Risk 33

Severity

5.7

Buffer Overflow

AV:A/AC:M/Au:N/C:N/I:N/A:C

Buffer overflow in ISC DHCP 4.2.x before 4.2.4-P1, when DHCPv6 mode is enabled, allows remote attackers to cause a denial of service (segmentation fault and daemon exit) via a crafted client identifier parameter.

First published (updated )

CVE-2012-3570

ISC DHCPIt was found that omapi code doesn't free socket descriptor if empty message was sent by client, whi…

Risk 19

Severity

It was found that omapi code doesn't free socket descriptor if empty message was sent by client, which allows malicious client to use up all available descriptors causing Denial of Service.

Upstream patch:

https://source.isc.org/cgi-bin/gitweb.cgi?p=dhcp.git;a=commit;h=1a6b62fe17a

First published (updated )

REDHAT-BUG-1522918