ISC DHCP: dhcpd Denial of service

ISC DHCP: dhcpd Denial of service dhcpd as included in the ISC DHCP implementation does not properly handle special conditions, leading to a Denial of Service. dhcp 2009-08-18 2009-08-18 275231 remote 3.1.2_p1 3.1.2_p1

ISC DHCP is the reference implementation of the Dynamic Host Configuration Protocol as specified in RFC 2131.

Christoph Biedl discovered that dhcpd does not properly handle certain DHCP requests when configured both using "dhcp-client-identifier" and "hardware ethernet".

A remote attacker might send a specially crafted request to dhcpd, possibly resulting in a Denial of Service (daemon crash).

There is no known workaround at this time.

All ISC DHCP users should upgrade to the latest version:


    # emerge --sync
    # emerge --ask --oneshot --verbose ">=net-misc/dhcp-3.1.2_p1"

CVE-2009-1892 rbu a3li a3li