7.2

CVE-2007-5365

Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a DHCP request specifying a maximum message size smaller than the minimum IP MTU.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Debian ≫ Debian Linux Version 3.1
Debian ≫ Debian Linux Version 4.0
Openbsd ≫ Openbsd Version 4.0
Openbsd ≫ Openbsd Version 4.1
Openbsd ≫ Openbsd Version 4.2
Redhat ≫ Enterprise Linux Version 2.1 Edition as
Redhat ≫ Enterprise Linux Version 2.1 Edition es
Redhat ≫ Linux Advanced Workstation Version 2.1 Edition itanium
Sun ≫ Opensolaris Version snv_01 Edition sparc
Sun ≫ Opensolaris Version snv_01 Edition x86
Sun ≫ Opensolaris Version snv_02 Edition sparc
Sun ≫ Opensolaris Version snv_02 Edition x86
Sun ≫ Opensolaris Version snv_03 Edition sparc
Sun ≫ Opensolaris Version snv_03 Edition x86
Sun ≫ Opensolaris Version snv_04 Edition sparc
Sun ≫ Opensolaris Version snv_04 Edition x86
Sun ≫ Opensolaris Version snv_05 Edition sparc
Sun ≫ Opensolaris Version snv_05 Edition x86
Sun ≫ Opensolaris Version snv_06 Edition sparc
Sun ≫ Opensolaris Version snv_06 Edition x86
Sun ≫ Opensolaris Version snv_07 Edition sparc
Sun ≫ Opensolaris Version snv_07 Edition x86
Sun ≫ Opensolaris Version snv_08 Edition sparc
Sun ≫ Opensolaris Version snv_08 Edition x86
Sun ≫ Opensolaris Version snv_09 Edition sparc
Sun ≫ Opensolaris Version snv_09 Edition x86
Sun ≫ Opensolaris Version snv_10 Edition sparc
Sun ≫ Opensolaris Version snv_10 Edition x86
Sun ≫ Opensolaris Version snv_11 Edition sparc
Sun ≫ Opensolaris Version snv_11 Edition x86
Sun ≫ Opensolaris Version snv_12 Edition sparc
Sun ≫ Opensolaris Version snv_12 Edition x86
Sun ≫ Opensolaris Version snv_13 Edition sparc
Sun ≫ Opensolaris Version snv_13 Edition x86
Sun ≫ Opensolaris Version snv_14 Edition sparc
Sun ≫ Opensolaris Version snv_14 Edition x86
Sun ≫ Opensolaris Version snv_15 Edition sparc
Sun ≫ Opensolaris Version snv_15 Edition x86
Sun ≫ Opensolaris Version snv_16 Edition sparc
Sun ≫ Opensolaris Version snv_16 Edition x86
Sun ≫ Opensolaris Version snv_17 Edition sparc
Sun ≫ Opensolaris Version snv_17 Edition x86
Sun ≫ Opensolaris Version snv_18 Edition sparc
Sun ≫ Opensolaris Version snv_18 Edition x86
Sun ≫ Opensolaris Version snv_19 Edition sparc
Sun ≫ Opensolaris Version snv_19 Edition x86
Sun ≫ Opensolaris Version snv_20 Edition sparc
Sun ≫ Opensolaris Version snv_20 Edition x86
Sun ≫ Opensolaris Version snv_21 Edition sparc
Sun ≫ Opensolaris Version snv_21 Edition x86
Sun ≫ Opensolaris Version snv_22 Edition sparc
Sun ≫ Opensolaris Version snv_22 Edition x86
Sun ≫ Opensolaris Version snv_23 Edition sparc
Sun ≫ Opensolaris Version snv_23 Edition x86
Sun ≫ Opensolaris Version snv_24 Edition sparc
Sun ≫ Opensolaris Version snv_24 Edition x86
Sun ≫ Opensolaris Version snv_25 Edition sparc
Sun ≫ Opensolaris Version snv_25 Edition x86
Sun ≫ Opensolaris Version snv_26 Edition sparc
Sun ≫ Opensolaris Version snv_26 Edition x86
Sun ≫ Opensolaris Version snv_27 Edition sparc
Sun ≫ Opensolaris Version snv_27 Edition x86
Sun ≫ Opensolaris Version snv_28 Edition sparc
Sun ≫ Opensolaris Version snv_28 Edition x86
Sun ≫ Opensolaris Version snv_29 Edition sparc
Sun ≫ Opensolaris Version snv_29 Edition x86
Sun ≫ Opensolaris Version snv_30 Edition sparc
Sun ≫ Opensolaris Version snv_30 Edition x86
Sun ≫ Opensolaris Version snv_31 Edition sparc
Sun ≫ Opensolaris Version snv_31 Edition x86
Sun ≫ Opensolaris Version snv_32 Edition sparc
Sun ≫ Opensolaris Version snv_32 Edition x86
Sun ≫ Opensolaris Version snv_33 Edition sparc
Sun ≫ Opensolaris Version snv_33 Edition x86
Sun ≫ Opensolaris Version snv_34 Edition sparc
Sun ≫ Opensolaris Version snv_34 Edition x86
Sun ≫ Opensolaris Version snv_35 Edition sparc
Sun ≫ Opensolaris Version snv_35 Edition x86
Sun ≫ Opensolaris Version snv_36 Edition sparc
Sun ≫ Opensolaris Version snv_36 Edition x86
Sun ≫ Opensolaris Version snv_37 Edition sparc
Sun ≫ Opensolaris Version snv_37 Edition x86
Sun ≫ Opensolaris Version snv_38 Edition sparc
Sun ≫ Opensolaris Version snv_38 Edition x86
Sun ≫ Opensolaris Version snv_39 Edition sparc
Sun ≫ Opensolaris Version snv_39 Edition x86
Sun ≫ Opensolaris Version snv_40 Edition sparc
Sun ≫ Opensolaris Version snv_40 Edition x86
Sun ≫ Opensolaris Version snv_41 Edition sparc
Sun ≫ Opensolaris Version snv_41 Edition x86
Sun ≫ Opensolaris Version snv_42 Edition sparc
Sun ≫ Opensolaris Version snv_42 Edition x86
Sun ≫ Opensolaris Version snv_43 Edition sparc
Sun ≫ Opensolaris Version snv_43 Edition x86
Sun ≫ Opensolaris Version snv_44 Edition sparc
Sun ≫ Opensolaris Version snv_44 Edition x86
Sun ≫ Opensolaris Version snv_45 Edition sparc
Sun ≫ Opensolaris Version snv_45 Edition x86
Sun ≫ Opensolaris Version snv_46 Edition sparc
Sun ≫ Opensolaris Version snv_46 Edition x86
Sun ≫ Opensolaris Version snv_47 Edition sparc
Sun ≫ Opensolaris Version snv_47 Edition x86
Sun ≫ Opensolaris Version snv_48 Edition sparc
Sun ≫ Opensolaris Version snv_48 Edition x86
Sun ≫ Opensolaris Version snv_49 Edition sparc
Sun ≫ Opensolaris Version snv_49 Edition x86
Sun ≫ Opensolaris Version snv_50 Edition sparc
Sun ≫ Opensolaris Version snv_50 Edition x86
Sun ≫ Opensolaris Version snv_51 Edition sparc
Sun ≫ Opensolaris Version snv_51 Edition x86
Sun ≫ Opensolaris Version snv_52 Edition sparc
Sun ≫ Opensolaris Version snv_52 Edition x86
Sun ≫ Opensolaris Version snv_53 Edition sparc
Sun ≫ Opensolaris Version snv_53 Edition x86
Sun ≫ Opensolaris Version snv_54 Edition sparc
Sun ≫ Opensolaris Version snv_54 Edition x86
Sun ≫ Opensolaris Version snv_55 Edition sparc
Sun ≫ Opensolaris Version snv_55 Edition x86
Sun ≫ Opensolaris Version snv_56 Edition sparc
Sun ≫ Opensolaris Version snv_56 Edition x86
Sun ≫ Opensolaris Version snv_57 Edition sparc
Sun ≫ Opensolaris Version snv_57 Edition x86
Sun ≫ Opensolaris Version snv_58 Edition sparc
Sun ≫ Opensolaris Version snv_58 Edition x86
Sun ≫ Opensolaris Version snv_59 Edition sparc
Sun ≫ Opensolaris Version snv_59 Edition x86
Sun ≫ Opensolaris Version snv_60 Edition sparc
Sun ≫ Opensolaris Version snv_60 Edition x86
Sun ≫ Opensolaris Version snv_61 Edition sparc
Sun ≫ Opensolaris Version snv_61 Edition x86
Sun ≫ Opensolaris Version snv_62 Edition sparc
Sun ≫ Opensolaris Version snv_62 Edition x86
Sun ≫ Opensolaris Version snv_63 Edition sparc
Sun ≫ Opensolaris Version snv_63 Edition x86
Sun ≫ Opensolaris Version snv_64 Edition sparc
Sun ≫ Opensolaris Version snv_64 Edition x86
Sun ≫ Opensolaris Version snv_65 Edition sparc
Sun ≫ Opensolaris Version snv_65 Edition x86
Sun ≫ Opensolaris Version snv_66 Edition sparc
Sun ≫ Opensolaris Version snv_66 Edition x86
Sun ≫ Opensolaris Version snv_67 Edition sparc
Sun ≫ Opensolaris Version snv_67 Edition x86
Sun ≫ Opensolaris Version snv_68 Edition sparc
Sun ≫ Opensolaris Version snv_68 Edition x86
Sun ≫ Opensolaris Version snv_69 Edition sparc
Sun ≫ Opensolaris Version snv_69 Edition x86
Sun ≫ Opensolaris Version snv_70 Edition sparc
Sun ≫ Opensolaris Version snv_70 Edition x86
Sun ≫ Opensolaris Version snv_71 Edition sparc
Sun ≫ Opensolaris Version snv_71 Edition x86
Sun ≫ Opensolaris Version snv_72 Edition sparc
Sun ≫ Opensolaris Version snv_72 Edition x86
Sun ≫ Opensolaris Version snv_73 Edition sparc
Sun ≫ Opensolaris Version snv_73 Edition x86
Sun ≫ Opensolaris Version snv_74 Edition sparc
Sun ≫ Opensolaris Version snv_74 Edition x86
Sun ≫ Opensolaris Version snv_75 Edition sparc
Sun ≫ Opensolaris Version snv_75 Edition x86
Sun ≫ Opensolaris Version snv_76 Edition sparc
Sun ≫ Opensolaris Version snv_76 Edition x86
Sun ≫ Opensolaris Version snv_77 Edition sparc
Sun ≫ Opensolaris Version snv_77 Edition x86
Sun ≫ Opensolaris Version snv_78 Edition sparc
Sun ≫ Opensolaris Version snv_78 Edition x86
Sun ≫ Opensolaris Version snv_79 Edition sparc
Sun ≫ Opensolaris Version snv_79 Edition x86
Sun ≫ Opensolaris Version snv_80 Edition sparc
Sun ≫ Opensolaris Version snv_80 Edition x86
Sun ≫ Opensolaris Version snv_81 Edition sparc
Sun ≫ Opensolaris Version snv_81 Edition x86
Sun ≫ Opensolaris Version snv_82 Edition sparc
Sun ≫ Opensolaris Version snv_82 Edition x86
Sun ≫ Opensolaris Version snv_83 Edition sparc
Sun ≫ Opensolaris Version snv_83 Edition x86
Sun ≫ Opensolaris Version snv_84 Edition sparc
Sun ≫ Opensolaris Version snv_84 Edition x86
Sun ≫ Opensolaris Version snv_85 Edition sparc
Sun ≫ Opensolaris Version snv_85 Edition x86
Sun ≫ Opensolaris Version snv_86 Edition sparc
Sun ≫ Opensolaris Version snv_86 Edition x86
Sun ≫ Opensolaris Version snv_87 Edition sparc
Sun ≫ Opensolaris Version snv_87 Edition x86
Sun ≫ Opensolaris Version snv_88 Edition sparc
Sun ≫ Opensolaris Version snv_88 Edition x86
Sun ≫ Opensolaris Version snv_89 Edition sparc
Sun ≫ Opensolaris Version snv_89 Edition x86
Sun ≫ Opensolaris Version snv_90 Edition sparc
Sun ≫ Opensolaris Version snv_90 Edition x86
Sun ≫ Opensolaris Version snv_91 Edition sparc
Sun ≫ Opensolaris Version snv_91 Edition x86
Sun ≫ Opensolaris Version snv_92 Edition sparc
Sun ≫ Opensolaris Version snv_92 Edition x86
Sun ≫ Opensolaris Version snv_93 Edition sparc
Sun ≫ Opensolaris Version snv_93 Edition x86
Sun ≫ Opensolaris Version snv_94 Edition sparc
Sun ≫ Opensolaris Version snv_94 Edition x86
Sun ≫ Opensolaris Version snv_95 Edition sparc
Sun ≫ Opensolaris Version snv_95 Edition x86
Sun ≫ Opensolaris Version snv_96 Edition sparc
Sun ≫ Opensolaris Version snv_96 Edition x86
Sun ≫ Opensolaris Version snv_97 Edition sparc
Sun ≫ Opensolaris Version snv_97 Edition x86
Sun ≫ Opensolaris Version snv_98 Edition sparc
Sun ≫ Opensolaris Version snv_98 Edition x86
Sun ≫ Opensolaris Version snv_99 Edition sparc
Sun ≫ Opensolaris Version snv_99 Edition x86
Sun ≫ Opensolaris Version snv_100 Edition sparc
Sun ≫ Opensolaris Version snv_100 Edition x86
Sun ≫ Opensolaris Version snv_101 Edition sparc
Sun ≫ Opensolaris Version snv_101 Edition x86
Sun ≫ Opensolaris Version snv_102 Edition sparc
Sun ≫ Opensolaris Version snv_102 Edition x86
Sun ≫ Solaris Version 8.0 Edition sparc
Sun ≫ Solaris Version 8.0 Edition x86
Sun ≫ Solaris Version 9.0 Edition sparc
Sun ≫ Solaris Version 9.0 Edition x86
Sun ≫ Solaris Version 10.0 Edition sparc
Sun ≫ Solaris Version 10.0 Edition x86
Ubuntu ≫ Ubuntu Linux Version 6.06 Update _nil_ Edition lts
Ubuntu ≫ Ubuntu Linux Version 6.10
Ubuntu ≫ Ubuntu Linux Version 7.04
Ubuntu ≫ Ubuntu Linux Version 7.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 80.27% 0.996
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=446354
http://secunia.com/advisories/27160
Vendor Advisory
http://secunia.com/advisories/27273
Vendor Advisory
http://secunia.com/advisories/27338
Vendor Advisory
http://secunia.com/advisories/27350
Vendor Advisory
http://secunia.com/advisories/32668
Vendor Advisory
http://securitytracker.com/id?1021157
http://sunsolve.sun.com/search/document.do?assetkey=1-21-109077-21-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-243806-1
http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1962
http://www.debian.org/security/2007/dsa-1388
http://www.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/dhcpd/options.c
Patch
http://www.openbsd.org/errata40.html#016_dhcpd
Patch
http://www.openbsd.org/errata41.html#010_dhcpd
Patch
http://www.openbsd.org/errata42.html#001_dhcpd
Patch
http://www.redhat.com/support/errata/RHSA-2007-0970.html
http://www.securityfocus.com/archive/1/482085/100/100/threaded
http://www.securityfocus.com/archive/1/483230/100/100/threaded
http://www.securityfocus.com/bid/25984
Patch
http://www.securityfocus.com/bid/32213
http://www.securitytracker.com/id?1018794
http://www.ubuntu.com/usn/usn-531-1
http://www.ubuntu.com/usn/usn-531-2
http://www.vupen.com/english/advisories/2008/3088
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/37045
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5817
https://www.exploit-db.com/exploits/4601