10

CVE-2009-0692

Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Isc ≫ Dhcp Version2.0
Isc ≫ Dhcp Version3.0
Isc ≫ Dhcp Version3.1
Isc ≫ Dhcp Version4.0
Isc ≫ Dhcp Version4.1.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 25.78% 0.977
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083
http://secunia.com/advisories/40551
http://www.vupen.com/english/advisories/2010/1796
http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-010.txt.asc
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00003.html
http://secunia.com/advisories/35785
Vendor Advisory
http://secunia.com/advisories/35829
http://secunia.com/advisories/35830
http://secunia.com/advisories/35831
http://secunia.com/advisories/35832
http://secunia.com/advisories/35841
http://secunia.com/advisories/35849
http://secunia.com/advisories/35850
http://secunia.com/advisories/35851
http://secunia.com/advisories/35880
http://secunia.com/advisories/36457
http://secunia.com/advisories/37342
http://security.gentoo.org/glsa/glsa-200907-12.xml
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561471
http://www.debian.org/security/2009/dsa-1833
http://www.kb.cert.org/vuls/id/410676
US Government Resource
http://www.mandriva.com/security/advisories?name=MDVSA-2009:151
http://www.osvdb.org/55819
http://www.redhat.com/support/errata/RHSA-2009-1136.html
http://www.redhat.com/support/errata/RHSA-2009-1154.html
http://www.securityfocus.com/bid/35668
http://www.securitytracker.com/id?1022548
http://www.ubuntu.com/usn/usn-803-1
http://www.vupen.com/english/advisories/2009/1891
https://bugzilla.redhat.com/show_bug.cgi?id=507717
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10758
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5941
https://www.isc.org/downloadables/12
https://www.isc.org/node/468
Patch
Vendor Advisory
https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01177.html
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00340.html