Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
198
security advisoryhigh severityarbitrary code executionArch Linux: ASA-202106-10 High: Dhclient Arbitrary Code Execution
The package dhclient before version 4.4.2.P1-1 is vulnerable to arbitrary code execution. . Arch Linux Security Advisory ASA-202106-10 ========================================= Severity: High Date : 2021-06-01 CVE-ID : CVE-2021-25217 Package : dhclient Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2004 Summary ====== The package dhclient before version 4.4.2.P1-1 is vulnerable to arbitrary code execution. Resolution ========= Upgrade to 4.4.2.P1-1. # pacman -Syu "dhclient> =4.4.2.P1-1" The problem has been fixed upstream in version 4.4.2.P1. Workaround ========= None. Description ========== A buffer overrun in the lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient before version 4.4.2-P1. Impact ===== An attacker could crash the DHCP client, or potentially execute arbitrary code, through a crafted lease file. References ========= https://kb.isc.org/docs/cve-2021-25217 https://downloads.isc.org/isc/dhcp/4.4.2-P1/patches/4.4.2.CVE-2021-25217.patch https://security.archlinux.org/CVE-2021-25217 . A serious vulnerability in the dhclient package could jeopardize system security, enabling attackers to execute code. Immediate updates recommended. Arch Linux, dhclient, high Severity, arbitrary Code. . LinuxSecurity.com Team
Jun 03, 2021
ArchLinux
200
security advisorydenial of servicebuffer overflowSciLinux SL6: SLSA-2018-0469-1 Important: Code Execution Risk in dhcp
dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server (CVE-2018-5732) * dhcp: Reference count overflow in dhcpd allows denial of service (CVE-2018-5733) SL6 x86_64 dhclient-4.1.1-53.P1.el6_9.3.x86_64.rpm dhcp-4.1.1-53.P1.el6_9.3.x86_64.rpm dhcp-common-4.1.1-53.P1.el6_9.3.x86_64.rpm dhcp-debuginfo-4.1.1-53.P1.el6_9.3.i686.rpm dh [More...]. Synopsis: Important: dhcp security and bug fix update Advisory ID: SLSA-2018:0469-1 Issue Date: 2018-03-08 CVE Numbers: CVE-2018-5732 CVE-2018-5733 -- Security Fix(es): * dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server (CVE-2018-5732) * dhcp: Reference count overflow in dhcpd allows denial of service (CVE-2018-5733) -- SL6 x86_64 dhclient-4.1.1-53.P1.el6_9.3.x86_64.rpm dhcp-4.1.1-53.P1.el6_9.3.x86_64.rpm dhcp-common-4.1.1-53.P1.el6_9.3.x86_64.rpm dhcp-debuginfo-4.1.1-53.P1.el6_9.3.i686.rpm dhcp-debuginfo-4.1.1-53.P1.el6_9.3.x86_64.rpm dhcp-devel-4.1.1-53.P1.el6_9.3.i686.rpm dhcp-devel-4.1.1-53.P1.el6_9.3.x86_64.rpm i386 dhclient-4.1.1-53.P1.el6_9.3.i686.rpm dhcp-4.1.1-53.P1.el6_9.3.i686.rpm dhcp-common-4.1.1-53.P1.el6_9.3.i686.rpm dhcp-debuginfo-4.1.1-53.P1.el6_9.3.i686.rpm dhcp-devel-4.1.1-53.P1.el6_9.3.i686.rpm - Scientific Linux Development Team . Essential DHCP security update for SL6.x tackles buffer overflow vulnerabilities and denial of service threats, improving overall system integrity.. dhcp Security, Buffer Overflow, Denial of Service, Important Fix. . Severity: Important. LinuxSecurity.com Team
Mar 08, 2018
•Important
Scientific Linux
198
security advisorydenial of servicehigh severityArch Linux: 201803-3 High Severity: dhclient Denial of Service
The package dhclient before version 4.4.1-1 is vulnerable to denial of service. . Arch Linux Security Advisory ASA-201803-3 ======================================== Severity: High Date : 2018-03-05 CVE-ID : CVE-2018-5732 Package : dhclient Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-648 Summary ====== The package dhclient before version 4.4.1-1 is vulnerable to denial of service. Resolution ========= Upgrade to 4.4.1-1. # pacman -Syu "dhclient> =4.4.1-1" The problem has been fixed upstream in version 4.4.1. Workaround ========= None. Description ========== An out-of-bound memory access flaw was found in the way dhclient processed a DHCP response packet. A malicious DHCP server could potentially use this flaw to crash dhclient processes running on DHCP client machines via a crafted DHCP response packet. Impact ===== A remote attacker is able to crash the dhclient processes via a crafted DHCP response packet. References ========= https://kb.isc.org/docs/aa-01565 https://lists.isc.org/pipermail/dhcp-announce/2018-February/000418.html ;a=commitdiff;h=c5931725b48b121d232df4ba9e45bc41e0ba114d https://security.archlinux.org/CVE-2018-5732 . Arch Linux Security Notice ASA-202309-7 with critical urgency regarding dhclient due to a potential denial of service flaw.. Arch Linux,DHCP,Denial Of Service,Security Advisory. . LinuxSecurity.com Team
Mar 06, 2018
ArchLinux
100
security advisoryremote exploitcriticalSuSE: Critical Update for Dhclient Remote Root Compromise
Dhclient could be tricked by a rogue DHCP server to execute commands as user root.. -----BEGIN PGP SIGNED MESSAGE----- ______________________________________________________________________________ SuSE Security Announcement Package: dhclient < 2.0 Date: Tue Jul 11 15:12:22 CEST 2000 Affected SuSE versions: 6.1-6.4 Vulnerability Type: remote root compromise SuSE default package: no Other affected systems: all unix systems using this package ______________________________________________________________________________ A security hole was discovered in the package mentioned above. Please update it as soon as possible or disable the service if you are using this software on your SuSE Linux installation(s). Other Linux distributions or operating systems might be affected as well, please contact your vendor for information about this issue. Please note that we provide this information on an "as-is" basis only. There is no warranty whatsoever and no liability for any direct, indirect or incidental damage arising from this information or the installation of the update package. _____________________________________________________________________________ 1. Problem Description The client side program of the ISC DHCP package, dhclient, does not do quoting of server messages before passing them to /sbin/dhclient-script. This script is executed with root privileges. 2. Impact Dhclient could be tricked by a rogue DHCP server to execute commands as user root. This leads to a remote root compromise of the system using dhclient. 3. Solution Update the package from our FTP server. ______________________________________________________________________________ Please verify these md5 checksums of the updates before installing: (For SuSE 6.0, please use the 6.1 updates) AXP: 262677203e3b1dada23e65ae60d08264 /6.3/n1/dhclient-2.0pl2-3.alpha.rpm 910097426b5771c82abf8f323086b5ba i386: 300a7c8220d3b9f65a2aef3ed4fdb7b3 7be68cd54e7fd3766b7eb36fc2e854c5 44fad0cee0cb53627ed7c507077d5d2b /6.3/n1/dhclient-2.0pl2-3.i386.rpm 320d4414841e29bd08584fc5d8592d99 PPC: a8a19501e4821ab6c7b375972eb1e5ce b4ea052ba25b10586cc14f6fea5b2d9f ______________________________________________________________________________ You can find updates on our ftp-Server: for Intel processors for Alpha processors or try the following web pages for a list of mirrors: SUSE – Open-Source-Lösungen für Enterprise Server und Cloud | SUSE Our webpage for patches: SUSE – Open-Source-Lösungen für Enterprise Server und Cloud | SUSE Our webpage for security announcements: SUSE – Open-Source-Lösungen für Enterprise Server und Cloud | SUSE If you want to report vulnerabilities, please contact
Jul 11, 2000
•Critical
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!