Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 8 MGASA-2022-0374 Moderate: ISC DHCP Memory Overflow Risk

mageia
Calendar Grey October 18, 2022
Dist Mageia Esm H88
The MGASA-2022-0456 patch tackles urgent vulnerabilities in OpenSSH, boosting client resilience against network attacks.
In ISC DHCP 4.4.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called from add_option(), it increases the option's refcount field

Summary

In ISC DHCP 4.4.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called from add_option(), it increases the option's refcount field. However, there is not a corresponding call to option_dereference() to decrement the refcount field. The function add_option() is only used in server responses to lease query packets. Each lease query response calls this function for several options, so eventually, the reference counters could overflow and cause the server to abort. (CVE-2022-2928)
In ISC DHCP 1.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1 a system with access to a DHCP server, sending DHCP packets crafted to include fqdn labels longer than 63 bytes, could eventually cause the server to run out of memory. (CVE-2022-2929)

References

- https://bugs.mageia.org/show_bug.cgi?id=30942

- https://kb.isc.org/docs/cve-2022-2928

- https://kb.isc.org/docs/cve-2022-2929

- https://www.openwall.com/lists/oss-security/2022/10/05/1

- https://ubuntu.com/security/notices/USN-5658-1

- https://www.cve.org/CVERecord?id=CVE-2022-2928

- https://www.cve.org/CVERecord?id=CVE-2022-2929

Topics%20covered

Topics Covered

security advisory software update dhcp memory overflow mageia server response refcount fix

Resolution

SRPMS

- 8/core/dhcp-4.4.2-10.2.mga8

Publication date: 18 Oct 2022
URL: https://advisories.mageia.org/MGASA-2022-0374.html
Type: security
CVE: CVE-2022-2928, CVE-2022-2929

Topics%20covered

Topics Covered

security advisory software update dhcp memory overflow mageia server response refcount fix

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here