PT-2016-5211 · Isc+5 · Isc Dhcp+5

Konstantin Orekhov

·

Publicado

2016-03-09

·

Atualizado

2020-01-08

·

CVE-2016-2774

CVSS v2.0

7.1

Alta

VetorAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions ISC DHCP versions 4.1.x through 4.1-ESV-R12 ISC DHCP versions 4.2.x through 4.3.3
Description The issue allows remote attackers to cause a denial of service by establishing many TCP sessions, due to the lack of restriction on the number of concurrent TCP sessions. This can lead to an INSIST assertion failure or a request-processing outage.
Recommendations For ISC DHCP versions 4.1.x through 4.1-ESV-R12, update to version 4.1-ESV-R13 or later. For ISC DHCP versions 4.2.x through 4.3.3, update to version 4.3.4 or later.

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2017-2138
CESA-2016_2590
CVE-2016-2774
DLA-2003-1
RHSA-2016:2590
RHSA-2016_2590
SUSE-SU-2016:1692-1
SUSE-SU-2016:1735-1
SUSE-SU-2016:1791-1
SUSE-SU-2016:2024-1
SUSE-SU-2016_1692-1
SUSE-SU-2016_1735-1
SUSE-SU-2016_1791-1
SUSE-SU-2016_2024-1
USN-3586-1

Produtos afetados

Alt Linux
Centos
Isc Dhcp
Red Hat
Suse
Ubuntu