Rocky Linux 8.6 主机上安装的多个程序包受到 CIQ ciqsa-2026_0032 公告中提及的多个漏洞影响。

    此公告汇总了 CIQ LTS 8.6中 dhcp SRPM 的安全补丁。它解决了 25 个 CVE：
    CVE-2018-5732、、CVE-2011-0413、CVE-2022-2929CVE-2018-1111CVE-2010-2156和 20 个。

Tenable 已直接从 CIQ 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

Rocky Linux 8.6 主機上安裝的多個套件受到 CIQ ciqsa-2026_0032 公告中提及的多個弱點影響。

    此公告彙總了 CIQ LTS 8.6中 dhcp SRPM 的安全性修正。它解決了 25 個 CVE：
    CVE-2018-5732、CVE-2011-0413、 CVE-2022-2929CVE-2018-1111CVE-2010-2156和另外 20 個。

Tenable 已直接從 CIQ 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

Rocky Linux 8.6 ホストに、CIQ ciqsa-2026_0032 アドバイザリに記載されている複数の脆弱性の影響を受けるパッケージがインストールされています。

    このアドバイザリは、CIQ LTS 8.6の dhcp SRPM のセキュリティ修正をまとめたものです。25 件の CVE に対処します:
    CVE-2018-5732、 CVE-2011-0413、 CVE-2022-2929、 CVE-2018-1111、 CVE-2010-2156、その他 20 個。

Tenable は、前述の記述ブロックを CIQ セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

ISC の DHCP 実装に、いくつかのリモートの脆弱性が発見されました。

- CVE-2009-0692 dhclient が、過剰に長いサブネットマスクオプションを適切に処理していないことが判明しました。これにより、スタックベースのバッファオーバーフローや任意のコードの実行が発生する可能性があります。

- CVE-2009-1892 Christoph Biedl 氏は、特定の有効な形式の DHCP リクエストを受信する際に、DHCP サーバーがそのサーバー構成で「dhcp-client-identifier」と「hardware ethernet」を使用してホスト定義を混合させると、DHCP サーバーが終了する可能性があることを発見しました。この脆弱性は、lenny バージョンの dhcp3-server および dhcp3-server-ldap にのみ影響を与えます。

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0032 advisory.

    This advisory aggregates security fixes for the dhcp SRPM in CIQ LTS 8.6. It addresses 25 CVEs:
    CVE-2018-5732, CVE-2011-0413, CVE-2022-2929, CVE-2018-1111, CVE-2010-2156, and 20 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update to the dhcp package includes fixes for CVE-2009-0692 and CVE-2009-1892. More information on these issues are available here:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0692 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1892 Note:
CVE-2009-0692 had no security consequences on Fedora, thanks to the use of FORTIFY_SOURCE

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-200908-08 (ISC DHCP: dhcpd Denial of Service)

    Christoph Biedl discovered that dhcpd does not properly handle certain     DHCP requests when configured both using 'dhcp-client-identifier' and     'hardware ethernet'.
  Impact :

    A remote attacker might send a specially crafted request to dhcpd,     possibly resulting in a Denial of Service (daemon crash).
  Workaround :

    There is no known workaround at this time.

Several remote vulnerabilities have been discovered in ISC's DHCP implementation :

  - CVE-2009-0692     It was discovered that dhclient does not properly handle     overlong subnet mask options, leading to a stack-based     buffer overflow and possible arbitrary code execution.

  - CVE-2009-1892     Christoph Biedl discovered that the DHCP server may     terminate when receiving certain well-formed DHCP     requests, provided that the server configuration mixes     host definitions using 'dhcp-client-identifier' and     'hardware ethernet'. This vulnerability only affects the     lenny versions of dhcp3-server and dhcp3-server-ldap.

A vulnerability has been found and corrected in ISC DHCP :

ISC DHCP Server is vulnerable to a denial of service, caused by the improper handling of DHCP requests. If the host definitions are mixed using dhcp-client-identifier and hardware ethernet, a remote attacker could send specially crafted DHCP requests to cause the server to stop responding (CVE-2009-1892).

This update provides fixes for this vulnerability.

Do not require policycoreutils when installing dhcp or dhclient packages. If you have the package installed, the /sbin/restorecon program will be used by dhclient-script and the dhcpd init script.
This update to the dhcp package includes fixes for CVE-2009-0692 and CVE-2009-1892. More information on these issues are available here:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0692 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1892 Note:
CVE-2009-0692 had no security consequences on Fedora, thanks to the use of FORTIFY_SOURCE

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A vulnerability has been found and corrected in ISC DHCP :

Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528; allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a malformed DHCP packet with a large dhcp-max-message-size that triggers a stack-based buffer overflow, related to servers configured to send many DHCP options to clients (CVE-2007-0062).

Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option (CVE-2009-0692).

ISC DHCP Server is vulnerable to a denial of service, caused by the improper handling of DHCP requests. If the host definitions are mixed using dhcp-client-identifier and hardware ethernet, a remote attacker could send specially crafted DHCP requests to cause the server to stop responding (CVE-2009-1892).

Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers

This update provides fixes for this vulnerability.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
357706	Rocky Linux 8.6 [CIQ] 安全更新：dhcp-client / dhcp-client-debuginfo / dhcp-common / dhcp-devel / etc 多种漏洞（ciqsa-2026_0032）	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high
357706	Rocky Linux 8.6 [CIQ] 安全性更新：dhcp-client / dhcp-client-debuginfo / dhcp-common / dhcp-devel / etc 多個弱點（ciqsa-2026_0032）	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high
357706	Rocky Linux 8.6 [CIQ] セキュリティ更新:dhcp-client/dhcp-client-debuginfo/dhcp-common/dhcp-devel/etc 複数の脆弱性(ciqsa-2026_0032)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high
44698	Debian DSA-1833-1：dhcp3 - いくつかの脆弱性	Nessus	Debian Local Security Checks	2010/2/24	2021/1/4	critical
357706	Rocky Linux 8.6 [CIQ] Security Update: dhcp-client / dhcp-client-debuginfo / dhcp-common / dhcp-devel / etc Multiple Vulnerabilities (ciqsa-2026_0032)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high
40774	Fedora 10 : dhcp-4.0.0-37.fc10 (2009-8344)	Nessus	Fedora Local Security Checks	2009/8/26	2021/1/11	critical
40633	GLSA-200908-08 : ISC DHCP: dhcpd Denial of Service	Nessus	Gentoo Local Security Checks	2009/8/20	2021/1/6	medium
44698	Debian DSA-1833-1 : dhcp3 - several vulnerabilities	Nessus	Debian Local Security Checks	2010/2/24	2021/1/4	critical
39873	Mandriva Linux Security Advisory : dhcp (MDVSA-2009:154)	Nessus	Mandriva Local Security Checks	2009/7/20	2021/1/6	medium
42454	Fedora 11 : dhcp-4.1.0p1-4.fc11 (2009-9075)	Nessus	Fedora Local Security Checks	2009/11/11	2021/1/11	critical
42998	Mandriva Linux Security Advisory : dhcp (MDVSA-2009:312)	Nessus	Mandriva Local Security Checks	2009/12/4	2021/1/6	critical

检测

插件搜索

high

high

high

critical

high

critical

medium

critical

medium

critical

critical