Advisories » MGASA-2018-0410

Updated dhcp packages fix security vulnerability

Publication date: 26 Oct 2018
Modification date: 26 Oct 2018
Type: security
Affected Mageia releases : 6
CVE: CVE-2018-5732 , CVE-2018-5733

Description

Buffer overflow in dhclient possibly allowing code execution triggered by
malicious server (CVE-2018-5732).

Reference count overflow in dhcpd allows denial of service
(CVE-2018-5733).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=22674
• https://kb.isc.org/article/AA-01565
• https://kb.isc.org/article/AA-01567
• https://access.redhat.com/errata/RHSA-2018:0483
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5732
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5733

SRPMS

6/core

• dhcp-4.3.5-2.1.mga6