CVE-2009-0692 Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP serv...
HighCVSS 10.0
EPSS 25.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| isc dhcp | = 2.0 | No fix listed |
| isc dhcp | = 3.0 | No fix listed |
| isc dhcp | = 3.1 | No fix listed |
| isc dhcp | = 4.0 | No fix listed |
| isc dhcp | = 4.1.0 | No fix listed |
References
- NetBSD-SA2009-010 vendor-advisory
- SSRT100018 vendor-advisory
- SUSE-SA:2009:037 vendor-advisory
- 35785 third-party-advisory vendor-advisory
- 35829 third-party-advisory
- 35830 third-party-advisory
- 35831 third-party-advisory
- 35832 third-party-advisory
- 35841 third-party-advisory
- 35849 third-party-advisory
- 35850 third-party-advisory
- 35851 third-party-advisory
- 35880 third-party-advisory
- 36457 third-party-advisory
- 37342 third-party-advisory
- 40551 third-party-advisory
- GLSA-200907-12 vendor-advisory
- SSA:2009-195-01 vendor-advisory
- DSA-1833 vendor-advisory
- VU#410676 third-party-advisory us-government-resource
- MDVSA-2009:151 vendor-advisory
- 55819 vdb-entry
- RHSA-2009:1136 vendor-advisory
- RHSA-2009:1154 vendor-advisory
- 35668 vdb-entry
- 1022548 vdb-entry
- USN-803-1 vendor-advisory
- ADV-2009-1891 vdb-entry
- ADV-2010-1796 vdb-entry
- bugzilla.redhat.com
- oval:org.mitre.oval:def:10758 signature vdb-entry
- oval:org.mitre.oval:def:5941 signature vdb-entry
- www.isc.org
- www.isc.org patch vendor-advisory
- FEDORA-2009-8344 vendor-advisory
- FEDORA-2009-9075 vendor-advisory