| Summary: | <net-misc/dhcp-4.3.3_p1: UDP payload length not properly checked | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | Agostino Sarubbo <ago> |
| Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | CC: | base-system |
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | http://www.openwall.com/lists/oss-security/2016/01/12/15 | ||
| Whiteboard: | A3 [noglsa] | ||
| Package list: | Runtime testing required: | --- | |
Arches please test and mark stable =net-misc/dhcp-4.3.3_p1 with target KEYWORDS: alpha amd64 arm ~arm64 hppa ia64 ~m68k ~mips ppc ppc64 ~s390 ~sh sparc x86 ~amd64-fbsd ~sparc-fbsd ~x86-fbsd amd64 stable x86 done arm stable Stable on alpha. ppc stable Stable for HPPA PPC64. sparc stable ia64 stable. Maintainer(s), please cleanup. Security, please add it to the existing request, or file a new one. GLSA Vote: No |
From ${URL} : CVE-2015-8605 is a denial-of-service vector which can potentially be exploited against ISC DHCP servers, clients, and relays. All prior 4.x releases of ISC DHCP are vulnerable. Additionally, ISC DHCP 3.x may also be vulnerable, but no testing has been done. New releases of ISC DHCP, including security fixes for this vulnerability, are available at: www.isc.org/downloads/ Release notes can be obtained using the following links: ftp://ftp.isc.org/isc/dhcp/4.3.3-P1/dhcp-4.3.3-P1-RELNOTES ftp://ftp.isc.org/isc/dhcp/4.1-ESV-R12-P1/dhcp-4.1-ESV-R12-P1-RELNOTES @maintainer(s): since the fixed package is already in the tree, please let us know if it is ready for the stabilization or not.