CVE-2007-5365

dhcpd stack-based buffer overlow

Published Oct 11, 2007 CVSS 2.0 · 7.2 High EPSS 80.3% KEV · Not listed
Description
Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a DHCP request specifying a maximum message size smaller than the minimum IP MTU.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1388-1 New dhcp packages fix arbitrary code execution
Debian DSA Debian DSA DSA-1388-3 New dhcp packages fix arbitrary code execution
Ubuntu USN Ubuntu USN USN-531-1 dhcp vulnerability
Ubuntu USN Ubuntu USN USN-531-2 dhcp vulnerability
History

No history.