dhcpcd Multiple Security Vulnerbailities
BID:108090
CVE-2019-11577 | CVE-2019-11578 | CVE-2019-11579 |Info
dhcpcd Multiple Security Vulnerbailities
| Bugtraq ID: | 108090 |
| Class: | Design Error |
| CVE: |
CVE-2019-11577 CVE-2019-11578 CVE-2019-11579 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 26 2019 12:00AM |
| Updated: | Apr 26 2019 12:00AM |
| Credit: | Maxime Villard |
| Vulnerable: |
Roy Marples dhcpcd 7.2 Roy Marples dhcpcd 7.1.1 Roy Marples dhcpcd 7.1 Roy Marples dhcpcd 7.0.8 Roy Marples dhcpcd 7.0.7 Roy Marples dhcpcd 7.0.6 Roy Marples dhcpcd 7.0.5 Roy Marples dhcpcd 7.0.4 Roy Marples dhcpcd 7.0.3 Roy Marples dhcpcd 7.0.2 Roy Marples dhcpcd 7.0.1 Roy Marples dhcpcd 7.0 Roy Marples dhcpcd 6.11.5 Roy Marples dhcpcd 6.11.4 Roy Marples dhcpcd 6.11.2 Roy Marples dhcpcd 6.11 Roy Marples dhcpcd 6.10.2 Roy Marples dhcpcd 6.9.4 Roy Marples dhcpcd 6.9 Roy Marples dhcpcd 6.8.2 Roy Marples dhcpcd 6.8 Roy Marples dhcpcd 6.7 Roy Marples dhcpcd 6.6 Roy Marples dhcpcd 6.5.1 Roy Marples dhcpcd 6.4.5 Roy Marples dhcpcd 6.4 Roy Marples dhcpcd 6.2 Roy Marples dhcpcd 5.5 Roy Marples dhcpcd 5.2.9 Roy Marples dhcpcd 5.2.2 Roy Marples dhcpcd 5.1 Roy Marples dhcpcd 5.0.5 Roy Marples dhcpcd 5.0 Roy Marples dhcpcd 4.0.12 Roy Marples dhcpcd 4.0.11 Roy Marples dhcpcd 4.0.10 Roy Marples dhcpcd 4.0.9 Roy Marples dhcpcd 4.0.8 Roy Marples dhcpcd 4.0.4 Roy Marples dhcpcd 4.0.2 |
| Not Vulnerable: |
Roy Marples dhcpcd 7.2.1 |
Discussion
dhcpcd Multiple Security Vulnerbailities
dhcpcd is prone to multiple security vulnerabilities.
Attackers can exploit these issues to execute arbitrary code on the affected application. Failed attempts will likely cause a denial-of-service condition.
Versions prior to dhcpcd 7.2.1 are vulnerable.
dhcpcd is prone to multiple security vulnerabilities.
Attackers can exploit these issues to execute arbitrary code on the affected application. Failed attempts will likely cause a denial-of-service condition.
Versions prior to dhcpcd 7.2.1 are vulnerable.
Exploit / POC
dhcpcd Multiple Security Vulnerbailities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution / Fix
dhcpcd Multiple Security Vulnerbailities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
dhcpcd Multiple Security Vulnerbailities
References:
References:
- dhcpcd Homepage ()
- dhcpcd-discuss ()
- auth: Use consttime_memequal(3) to compare hashes ()
- compat: Provide consttime_memequal if not in libc ()
- DHCP: Fix a potential 1 byte read overflow with DHO_OPTSOVERLOADED ()
- DHCPv6: Fix a potential buffer overflow reading NA/TA addresses ()
- Really add consttime_memequal ()