PT-2015-3954 · Roy Marples · Dhcpcd

Jüri Aedla · Publicado 2015-03-12 · Atualizado 2017-09-21 · CVE-2014-7912

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions dhcpcd versions prior to 6.2.0 dhcpcd 5.x

Description The issue allows remote DHCP servers to execute arbitrary code or cause a denial of service due to memory corruption. This is possible because the get option function in dhcp.c does not validate the relationship between length fields and the amount of data. A large length value of an option in a DHCPACK message can trigger this issue.

Recommendations For dhcpcd versions prior to 6.2.0, update to version 6.2.0 or later to resolve the issue. For dhcpcd 5.x, consider disabling the get option function in dhcp.c as a temporary workaround until a patch is available.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2014-7912

DLA-506-1

ZDI-15-093

Produtos afetados

Dhcpcd

Referências · 11

• https://zerodayinitiative.com/advisories/ZDI-15-093 · Nota de Segurança
• https://android.googlesource.com/platform/external/dhcpcd/+/73c09dd8067250734511d955d8f792b41c7213f0 · Nota
• https://cve.org/CVERecord?id=CVE-2014-7912 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2014-7912 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2014-7912 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-7912 · Aviso do Fabricante
• http://securitytracker.com/id/1033124 · Nota
• https://ubuntu.com/security/CVE-2014-7912 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2014-7912 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-7912 · Aviso do Fabricante
• http://zerodayinitiative.com/advisories/ZDI-15-093 · Nota