Alias(es)

Release Date

Severity

Impact

Description

It indicates a possible exploit of "buffer overflow vulnerability" in logging function of ISC DHCPD daemon.

ISC DHCPD Daemons software is distributed in some of the Linux distribution package. A buffer overflow vulnerability is reported in its logging function that may allow an attacker to cause denial of service or execute arbitrary code on the vulnerable system. This is due to applications login routine failure to boundary check the data before processing it. For exploiting this an attacker may send malformed DHCP request with long string in the hostname options in the following messages DISCOVER, OFFER, REQUEST, ACK, or NAK to cause buffer overflow for executing arbitrary code on the vulnerable system or to crash server.

Affected Products

Recommended Actions

Coverage

Common Vulnerabilities and Exposures (CVE)

Reference/s