Synopsis:          Important: dhcp security update
Advisory ID:       SLSA-2018:0483-1
Issue Date:        2018-03-12
CVE Numbers:       CVE-2018-5732
                   CVE-2018-5733
--

Security Fix(es):

* dhcp: Buffer overflow in dhclient possibly allowing code execution
triggered by malicious server (CVE-2018-5732)

* dhcp: Reference count overflow in dhcpd allows denial of service
(CVE-2018-5733)
--

SL7
  x86_64
    dhclient-4.2.5-58.el7_4.3.x86_64.rpm
    dhcp-common-4.2.5-58.el7_4.3.x86_64.rpm
    dhcp-debuginfo-4.2.5-58.el7_4.3.i686.rpm
    dhcp-debuginfo-4.2.5-58.el7_4.3.x86_64.rpm
    dhcp-libs-4.2.5-58.el7_4.3.i686.rpm
    dhcp-libs-4.2.5-58.el7_4.3.x86_64.rpm
    dhcp-4.2.5-58.el7_4.3.x86_64.rpm
    dhcp-devel-4.2.5-58.el7_4.3.i686.rpm
    dhcp-devel-4.2.5-58.el7_4.3.x86_64.rpm

- Scientific Linux Development Team

SciLinux: SLSA-2018-0483-1 Important: dhcp on SL7.x x86_64

dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server (CVE-2018-5732) * dhcp: Reference count overflow in dhcpd allows denial of service ...

Summary

Important: dhcp security update



Security Fixes

* dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server (CVE-2018-5732)
* dhcp: Reference count overflow in dhcpd allows denial of service (CVE-2018-5733)
SL7 x86_64 dhclient-4.2.5-58.el7_4.3.x86_64.rpm dhcp-common-4.2.5-58.el7_4.3.x86_64.rpm dhcp-debuginfo-4.2.5-58.el7_4.3.i686.rpm dhcp-debuginfo-4.2.5-58.el7_4.3.x86_64.rpm dhcp-libs-4.2.5-58.el7_4.3.i686.rpm dhcp-libs-4.2.5-58.el7_4.3.x86_64.rpm dhcp-4.2.5-58.el7_4.3.x86_64.rpm dhcp-devel-4.2.5-58.el7_4.3.i686.rpm dhcp-devel-4.2.5-58.el7_4.3.x86_64.rpm
- Scientific Linux Development Team

Severity
Advisory ID: SLSA-2018:0483-1
Issued Date: : 2018-03-12
CVE Numbers: CVE-2018-5732
CVE-2018-5733