Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Slackware 12.2: 2009-195-01 Critical Dhcp Stack Overflow Threat

slackware
Calendar Grey July 15, 2009
Scroller Slackware
Recently released DHCP updates address a major vulnerability in the networking components of Slackware across multiple versions. Users are strongly encouraged to perform the upgrade.
New dhcp packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix a security issue with dhclient

Summary

Here are the details from the Slackware 12.2 ChangeLog: patches/packages/dhcp-3.1.2p1-i486-1_slack12.2.tgz: Upgraded. A stack overflow vulnerability was fixed in dhclient that could allow remote attackers to execute arbitrary commands as root on the system, or simply terminate the client, by providing an over-long subnet-mask option. For more information, see: https://www.cve.org/CVERecord?id=CVE-2009-0692 (* Security fix *)

Topics%20covered

Topics Covered

security advisory critical slackware dhcp stack overflow network threat

Where Find New Packages

HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading directly from ftp.slackware.com.
Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating additional FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 8.1: ftp://ftp.slackware.com/pub/slackware/slackware-8.1/patches/packages/dhcp-3.1.2p1-i386-1_slack8.1.tgz
Updated package for Slackware 9.0:
Updated package for Slackware 9.1:
Updated package for Slackware 10.0:
Updated package for Slackware 10.1:
Updated package for Slackware 10.2:
Updated package for Slackware 11.0:
Updated package for Slackware 12.0:
Updated package for Slackware 12.1:
Updated package for Slackware 12.2:
Updated package for Slackware -current:
Updated package for ...

Read the Full Advisory

MD5 Signatures

Slackware 8.1 package: 01143b6e39f09c606f962c79b6437598 dhcp-3.1.2p1-i386-1_slack8.1.tgz
Slackware 9.0 package: 93492796e78bc44e8ad92185ea65083b dhcp-3.1.2p1-i386-1_slack9.0.tgz
Slackware 9.1 package: 88c3c2242439b838f99c6e518db4a28e dhcp-3.1.2p1-i486-1_slack9.1.tgz
Slackware 10.0 package: e0ebe048f8e655cd9cd0e2767b4da486 dhcp-3.1.2p1-i486-1_slack10.0.tgz
Slackware 10.1 package: ac2ada2ca250bbd21872dd58b4775c77 dhcp-3.1.2p1-i486-1_slack10.1.tgz
Slackware 10.2 package: 33a95808d59b77e9fb83635478d5ea2f dhcp-3.1.2p1-i486-1_slack10.2.tgz
Slackware 11.0 package: e02bb8e11adeecc44b0f5d38cb06bdf3 dhcp-3.1.2p1-i486-1_slack11.0.tgz
Slackware 12.0 package: 309a1a3140899da2d9bf8405cee04a30 dhcp-3.1.2p1-i486-1_slack12.0.tgz
Slackware 12.1 package: 99be31135ef2b815ae4ac7eb2705abcf dhcp-3.1.2p1-i486-1_slack12.1.tgz
Slackware 12.2 package: 967911d55d67c85ae4d61828c3e5859a dhcp-3.1.2p1-i486-1_slack12.2.tgz
Slackware -current package: 5b328e631b47e61433d347b1836e07d6 dhcp-3.1.2p1-i486-1.txz
Slackware64 -current package: b4e120017ff3a0b4a21e7fd832c6216c dhcp-3.1.2p1-x86_64-1.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory critical slackware dhcp stack overflow network threat

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg dhcp-3.1.2p1-i486-1_slack12.2.tgz