Scientific Linux SL7: SLSA-2018-0483-1 Critical: dhcp Code Execution Risk

dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server (CVE-2018-5732) * dhcp: Reference count overflow in dhcpd allows denial of service (CVE-2018-5733) SL7 x86_64 dhclient-4.2.5-58.el7_4.3.x86_64.rpm dhcp-common-4.2.5-58.el7_4.3.x86_64.rpm dhcp-debuginfo-4.2.5-58.el7_4.3.i686.rpm dhcp-debuginfo-4.2.5-58.el7_4.3.x86_64.rpm dhcp [More...]

Synopsis:          Important: dhcp security update
Advisory ID:       SLSA-2018:0483-1
Issue Date:        2018-03-12
CVE Numbers:       CVE-2018-5732
                   CVE-2018-5733
--

Security Fix(es):

* dhcp: Buffer overflow in dhclient possibly allowing code execution
triggered by malicious server (CVE-2018-5732)

* dhcp: Reference count overflow in dhcpd allows denial of service
(CVE-2018-5733)
--

SL7
  x86_64
    dhclient-4.2.5-58.el7_4.3.x86_64.rpm
    dhcp-common-4.2.5-58.el7_4.3.x86_64.rpm
    dhcp-debuginfo-4.2.5-58.el7_4.3.i686.rpm
    dhcp-debuginfo-4.2.5-58.el7_4.3.x86_64.rpm
    dhcp-libs-4.2.5-58.el7_4.3.i686.rpm
    dhcp-libs-4.2.5-58.el7_4.3.x86_64.rpm
    dhcp-4.2.5-58.el7_4.3.x86_64.rpm
    dhcp-devel-4.2.5-58.el7_4.3.i686.rpm
    dhcp-devel-4.2.5-58.el7_4.3.x86_64.rpm

- Scientific Linux Development Team