==========================================================Ubuntu Security Notice USN-1108-1            April 11, 2011
dhcp3 vulnerability
CVE-2011-0997
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 8.04 LTS
Ubuntu 9.10
Ubuntu 10.04 LTS
Ubuntu 10.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  dhcp3-client                    3.0.3-6ubuntu7.2

Ubuntu 8.04 LTS:
  dhcp3-client                    3.0.6.dfsg-1ubuntu9.2

Ubuntu 9.10:
  dhcp3-client                    3.1.2-1ubuntu7.2

Ubuntu 10.04 LTS:
  dhcp3-client                    3.1.3-2ubuntu3.1

Ubuntu 10.10:
  dhcp3-client                    3.1.3-2ubuntu6.1

In general, a standard system update will make all the necessary changes.

Details follow:

Sebastian Krahmer discovered that the dhclient utility incorrectly filtered
crafted responses. An attacker could use this flaw with a malicious DHCP
server to execute arbitrary code, resulting in root privilege escalation.


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

          Size/MD5:    68426 b4a36d1b44e8276211cef0b9bfbb6ea5
          Size/MD5:     1428 2fe76544defdfa3d4ab61d548ea5bc03
          Size/MD5:   870240 f91416a0b8ed3fd0601688cf0b7df58f

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   221524 2cc3c7815cb6e6a2cc21d0c2a6286202
          Size/MD5:   454060 4d6e00d001d85359af4777316c012038
          Size/MD5:   131252 bf862b9ce2cc9888f9e617f42c0d8f77
          Size/MD5:   321024 383390887daadd122e7e66a9896e0432
          Size/MD5:   177440 04a6bc2b53da66245b8b79b71d8f82ed
          Size/MD5:   105842 9616c95d8f2d487fd330fb9b33c58474

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   196930 ebaee96958395481e8c9c25a6591c1a3
          Size/MD5:   431162 6fec8eaee0c753e95193f507e3c2c1eb
          Size/MD5:   117544 76fd573dc96ade71033c31e9965a1ede
          Size/MD5:   289684 8d0c386dc142ca3e69766e26fa6ced00
          Size/MD5:   152296 98cdda8ba797a8f3532e2db2c95f5329
          Size/MD5:    94176 369f369a8fd6b58df3e293a5264c8047

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   203612 da623d9e1694169cfc1de56f2e0df6e4
          Size/MD5:   435818 a6f18c0a5083885f0f3ad270a52f1ea9
          Size/MD5:   130290 8ed50d04b1c91276b0bdf19b3cda3fcd
          Size/MD5:   297742 95b7742e4fb7c4720add03965ef51b45
          Size/MD5:   158466 61e6403a4a5db1783c43fbfe6ad74e8c
          Size/MD5:    96696 a7d275b7895e47d8141fab29a3db415b

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   200826 04fe774f2349b12af88465a96a4443b4
          Size/MD5:   434238 c71c8b52f5324385d13e3610e7bef30e
          Size/MD5:   126784 ca67a9bd308dfb73bf85906f53e8ae6b
          Size/MD5:   294084 628696dfa6a0c9a2713b7fde4390d700
          Size/MD5:   156068 907d41b490e6155c580b83cec96e3f71
          Size/MD5:    96810 d1559518c2fc467cf6244ee8cd29176b

Updated packages for Ubuntu 8.04 LTS:

  Source archives:

          Size/MD5:    97783 a2e0e7077df662a15c039c462ecd8e3d
          Size/MD5:     1537 ccf77a9747dc8cbc6b65e0d94ab9c43b
          Size/MD5:   724045 e89ef34005c576ddbb229e3b4478f6e2

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   180140 9b8c326a22be742b43e2b8d9b07d4f86
          Size/MD5:   242126 8053c2330e512d48f0318af10079c50a
          Size/MD5:   300696 15bbfae5ba97f27d0c896b886773f02b
          Size/MD5:   124032 82fe33e521c7ee08b7a00596acc8cb8d
          Size/MD5:   342596 40acd4d59e72be79a5c930254bee0223
          Size/MD5:   114396 5e5c7a86cec5ef70f927cbf53fffec4d

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   159988 7c2cd082adad4cdae500b88b9429ea24
          Size/MD5:   221966 92748d084525779ad31fe09ae76ca8d5
          Size/MD5:   281564 0e64a350c9599b473f42949dbaa44533
          Size/MD5:   109818 5ef8d14534865cdf0b63699e54ab684a
          Size/MD5:   318748 205746468ea8d58f1babe96c28f46983
          Size/MD5:   103376 15e19ab3867304e29f59f3e97170f145

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:   158248 1ce010480a0ea9a1a8683995ab5c9b68
          Size/MD5:   220236 d0c1551dde51da5503fe3be6288a23bb
          Size/MD5:   279790 cf35fa8aaca649fd85366e684628a580
          Size/MD5:   109062 d1ff75192f05906028ac9001483529da
          Size/MD5:   316576 6f95deb3879a7c38c0f9cd1ba1ff0228
          Size/MD5:   102310 d4b1c32f8c1d1a6383fc09580e46ec79

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   177278 29a10d5d08bc3797b67770a4028758ff
          Size/MD5:   242046 27324a8f5623a94ff813148a5267fb4b
          Size/MD5:   296498 4b8af066dc6c2481e4ff360800c04e74
          Size/MD5:   122548 9ad8db4fbd23f1760d1bc123b01f014b
          Size/MD5:   341860 28075deaecbdc1d77166dcb1623a8c85
          Size/MD5:   112934 766413326d6486146da4aec03a2654bc

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   156574 742d54969d6dd68e7ac86ca00e1b1832
          Size/MD5:   218754 60013fe472200e1bf45d9b02d80a244e
          Size/MD5:   277066 bf1034124c51ddacf732c2887957a46e
          Size/MD5:   113494 b50639e27d92c0ababba9fab23242d7d
          Size/MD5:   313426 b93d5ec9d7ea9717a79d6bf2bb80a285
          Size/MD5:   102930 df99654fbd9e6f5aba7f962adb9d6470

Updated packages for Ubuntu 9.10:

  Source archives:

          Size/MD5:   141611 0cab5bee752928f3c9f0c8e1ded26167
          Size/MD5:     1955 a26905456538cd0d30e924e488302fc4
          Size/MD5:   799626 85901a9554650030df7d1ef3e5959fdf

  Architecture independent packages:

          Size/MD5:    26206 905e286082551fcbc23916052de7e2fa

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   208604 5bb8643607d5f416205174f97d443e8e
          Size/MD5:   270930 fa0267775f2471f0be30499bf121b6e7
          Size/MD5:   332152 ee101e67b7ad97bd410e983da115484d
          Size/MD5:   127130 0d4b4a1dc992d56f8c01d94990290910
          Size/MD5:   395062 a5ab658903283a97dd658e5cdfe6a45e
          Size/MD5:   125444 6f12bfb86b46567aa8e2ecba8af1852e
          Size/MD5:   348242 8fe33e4a7afac6d5a952d0c158d7ed45

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   191210 64285abd7e68c517eefcf3ff5eecb909
          Size/MD5:   252916 749769cec2a5d0cdfe5ddb67e6864270
          Size/MD5:   315850 e0deb4932a763831adc3e73cf0f068fa
          Size/MD5:   116650 434d9e26a1b3b5a4b5fd94bea2c581b4
          Size/MD5:   372288 481d9d80e948895969b72be4b825fbb8
          Size/MD5:   116424 49010850bef64719353588c5d88e6714
          Size/MD5:   326174 7f328cba4c811d5d56582328f1ad6b1d

  armel architecture (ARM Architecture):

          Size/MD5:   174400 4ed674aa3f13c4c4012def78b6cfd62f
          Size/MD5:   236228 c14a8f75dc70e363afb2e39b9b6c9b68
          Size/MD5:   300026 8183f7371713d8ddc8bd2b8f8d979794
          Size/MD5:   112806 41dcceea5abd7feac4f1f7465b3892b7
          Size/MD5:   349366 ea2f47d49b065c252caeb33d9d273363
          Size/MD5:   108672 f277fadf0e50c5325b20f8001f30108a
          Size/MD5:   301210 76887fde4612e80131c94a00b328a874

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:   187330 e70af0ba0633b7a10c666f2f2e30b017
          Size/MD5:   249154 bde848f0444ac204f0781d848771b2e7
          Size/MD5:   312056 e131e50d9159fb5a7cf92bd7532c6d5b
          Size/MD5:   115610 6bf9bc6ccc3986f7bda77f6e0929bd2b
          Size/MD5:   368276 a5d4ce07f31b702817fb3d3961fd8a7b
          Size/MD5:   114588 d030b6a51bf6eb1b682c88fcfc92cdda
          Size/MD5:   321710 5c51aac0b4ea78167072cce854d63f47

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   199998 aff548b71963695089f418a502bc5e01
          Size/MD5:   262344 a4799a7b4c6d6d91120ef36537485080
          Size/MD5:   324014 c6be94d8dda2d47ea08c3f1277160eda
          Size/MD5:   120394 4b35e8aa5a363a659daa6232a0a76501
          Size/MD5:   382434 9c71333d4f8ccc12d14996fa42ba60b7
          Size/MD5:   120310 32c5affaeb955349a26cae2bd9c92236
          Size/MD5:   335902 5460f8f32a30489940cf69855983ed3c

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   203458 038c030a32c3d74e3d20cb4f8eaf5336
          Size/MD5:   265862 67e06c4f7f5352a3248060245f41837c
          Size/MD5:   324634 873eeaf81f86f69e1de8f2c9c2335fda
          Size/MD5:   116874 4583b6c0cd5cf6abf8fc81ae1c5656a2
          Size/MD5:   387388 d31379a7fe21d36761ce6d6e01d51ba7
          Size/MD5:   121616 62ed8721ad7cfe9f45448c321be12340
          Size/MD5:   341160 9e72b31fccc6ca7d33fcf814f7cca8be

Updated packages for Ubuntu 10.04 LTS:

  Source archives:

          Size/MD5:   145049 762c8d99c1e8e1245830ff0cfc9c22cf
          Size/MD5:     1950 6fc0ed0a5f2f2897b25cb127fdf599bb
          Size/MD5:   804097 6ee8af8b283c95b3b4db5e88b6dd9a26

  Architecture independent packages:

          Size/MD5:    27294 5873371bf57e765fd69a49ab238f7f5f

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   208924 47388e6df5a8a88758f893f0157f7a49
          Size/MD5:   273438 3e968127e7212b682e23422ccd498a51
          Size/MD5:   335524 c2231ce6ce81fa1a61f33b50879ea8e7
          Size/MD5:   127748 31baa39d20b53e7200b146bb5e1dbc7a
          Size/MD5:   396594 05f2652d1223dbbf59bcfdb86503ec81
          Size/MD5:   126830 2017ee773f9e4c4136e6604003978a72
          Size/MD5:   349758 3a07e9f0c5b36e05024e98f2e01e7a36

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   191468 7efe2e4b59392afda8ef1c8d69aa04cd
          Size/MD5:   256600 1b24883c7ee056fcbcda20cc1d82673e
          Size/MD5:   318512 8ad3080333f5d86ad40548de9cfced43
          Size/MD5:   118816 c679db32ae992ca9f6fc5473e81df94a
          Size/MD5:   376744 e3b708777fcd15c84240e43bf08b5d7e
          Size/MD5:   117698 b0dfb728d6d9f69c9af3910744b1fbb8
          Size/MD5:   328168 617edc965494055443d2c43326c411d7

  armel architecture (ARM Architecture):

          Size/MD5:   180926 3969ae580d52c38b45d63ac388cbbe4d
          Size/MD5:   246116 4956ee0ca5be72ee8ece1cd89ccf5082
          Size/MD5:   309348 c8567f86659a5670b6c7167a106bf71a
          Size/MD5:   115350 023f49615f6ca0a8f2367e816921fa8d
          Size/MD5:   361242 b8e92e0d7ee35dccf62349627513b3d5
          Size/MD5:   113136 ecc1eca1107bf3d2a85145c87800f0a9
          Size/MD5:   314078 a09784b9e5545593b771e8db596b70ad

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   200432 0db5e288252f7cec9511aeedd6328a87
          Size/MD5:   265410 78eb3d25b509d5d3669a33bf8603b0df
          Size/MD5:   327180 9d47f9f6bd35ebd5e53e68ff8cf27473
          Size/MD5:   121552 7d955d50534795154e471aea30341fe1
          Size/MD5:   385370 dd7f5ffd85a725a8cb4f8fe6a067d0bb
          Size/MD5:   121446 0ccdd1ca74fcd96be84596ce324f967e
          Size/MD5:   337410 54549752057dc73a3e35a158b871ea36

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   212712 be3c531c2fffd6ad83501e44015a3532
          Size/MD5:   277974 5a9ee5790cc705c845cd085c71d001b5
          Size/MD5:   335174 22b404e90f206772c786f968392ecef1
          Size/MD5:   121764 97643d01dd5dd3eb06859cb881312e6d
          Size/MD5:   402564 889e3a0882bebb5b4ceb4df3c805d883
          Size/MD5:   126888 546ab5281e2ba4672471a30fce814e36
          Size/MD5:   353712 64fcbf89ca8fd7af9aa2a9bd66739170

Updated packages for Ubuntu 10.10:

  Source archives:

          Size/MD5:   151417 604106743c8429a59b9b8af55de854f7
          Size/MD5:     1962 792f947b2a6c3020c45ca1b56771c77e
          Size/MD5:   804097 6ee8af8b283c95b3b4db5e88b6dd9a26

  Architecture independent packages:

          Size/MD5:    27778 319b0ce429e455b13a2248cc2cbe3491

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   208588 f4d4d2a63016b2b9960654be7c04b9c5
          Size/MD5:   274192 4005626ae7c8ed06bf15a1e014968ebd
          Size/MD5:   335392 3f745248ea2b2c54e1771f1789cd13dc
          Size/MD5:   128922 dc2dd29ead86d887a22da63f27ae9692
          Size/MD5:   398270 ffd780e99cb19cc3884703ec930a68cb
          Size/MD5:   126752 a4d3f03e0855ce6ef4cf6a75f33198d1
          Size/MD5:   349942 430e5e501488da92c3b4e2f2a685912a

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   190312 23ced3137d0e056d9ce13dd41e656af3
          Size/MD5:   255768 07cfc1c5db7b6d8585e9a00513699049
          Size/MD5:   317854 f9a58ae40c5f2645e17e2a9349f07edf
          Size/MD5:   119094 9af94d26ecd3ce03c9d059ab8db5ff46
          Size/MD5:   376052 2dd5ab42f28d13baab1d332c92fcdbcf
          Size/MD5:   117472 9638997daef5f353621a3adea0f054d5
          Size/MD5:   327368 93d8a202391be7d55484901a7fa00f09

  armel architecture (ARM Architecture):

          Size/MD5:   191162 ea1961dc40672d12302dcb3e0ae62c44
          Size/MD5:   256344 fd6d84d8ca333a1e0cc0efc4c26df7cb
          Size/MD5:   319110 4ed5fb07ce8a4997c1132f96e4c29e39
          Size/MD5:   118586 ade0a8cfa1217ae39ff58bea47e4faa0
          Size/MD5:   377976 7f26e7b4442f8b17b8178fc7b44e6720
          Size/MD5:   118802 ee96894319dbf620dbf981a2493cefa0
          Size/MD5:   328204 3a65c3fb55385716b19bbb6fce72ab07

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   199526 1a984e2503c1a015134cf94e273b768a
          Size/MD5:   264952 7a2139af6f6681dae88cd826c04ce61e
          Size/MD5:   326646 8a1aaf899283814de8b8bcca6125576d
          Size/MD5:   121952 90719742a1e133ae5edb9c5d6e72ad06
          Size/MD5:   384922 1cb9a8d40d9405b061b28cd2236d3acd
          Size/MD5:   121542 81b420f37a81e5a05e5aadeaf1cb47c3
          Size/MD5:   336918 26cba2f6096556526ce2a64556f571e5

Ubuntu 1108-1: DHCP vulnerability

April 11, 2011
Sebastian Krahmer discovered that the dhclient utility incorrectly filtered crafted responses

Summary

Update Instructions

References

Severity
dhcp3 vulnerability

Package Information

Related News

23.Tablet Connections Esm H320
2 - 3 min read
The release of Ubuntu 24.04 LTS , also known as Noble Numbat, brings various security enhancements and exciting new features . These improvements
4.Lock AbstractDigital Esm H320
2 - 3 min read
Tails 6.2 is a new Linux distribution release that expands its multilingual support and improves security features. The distribution is a
19.Laptop Bed Esm H320
2 - 3 min read
AlmaLinux 9.4 beta has been released and provides compelling reasons to consider it for desktop usage. While AlmaLinux is primarily known as a
32.Lock Code Circular Esm H320
2 - 3 min read
Linux admins and security practitioners face significant challenges in keeping their Linux systems secure amidst the constant threat of kernel bugs.
1.Penguin Landscape Esm H320
2 - 3 min read
A significant security threat, known as the Spectre v2 exploit, has been observed targeting Linux systems running on modern Intel processors. Let's
10.FingerPrint Locks Esm H320
2 - 3 min read
The recent release of I2P 2.5.0 , an anonymous P2P network that protects against online censorship, surveillance, and monitoring, has brought a slew
24.Key Code Esm H320
2 - 3 min read
The Akira ransomware group has extorted approximately $42 million from over 250 victims since January 1, 2024. The group initially focused on
5.ShakingHands Esm H320
2 - 3 min read
At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved