The remote host is affected by the vulnerability described in GLSA-201804-05 (ISC DHCP: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in ISC DHCP. Please review       the CVE identifiers referenced below for details.
  Impact :

    Remote attackers could execute arbitrary code, cause a Denial of Service       condition, or have other unspecified impacts.
  Workaround :

    There are no known workarounds at this time for CVE-2018-5732 or       CVE-2018-5733.
    In accordance with upstream documentation, the recommended workaround       for CVE-2017-3144 is, &ldquo;to disallow access to the OMAPI control port       from unauthorized clients (in accordance with best practices for server       operation).&rdquo;

According to the versions of the dhcp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x     before 4.3.3-P1 allows remote attackers to cause a     denial of service (application crash) via an invalid     length field in a UDP IPv4 packet.(CVE-2015-8605)

  - A denial of service flaw was found in the way dhcpd     handled reference counting when processing client     requests. A malicious DHCP client could use this flaw     to trigger a reference count overflow on the server     side, potentially causing dhcpd to crash, by sending     large amounts of traffic.(CVE-2018-5733)

  - An out-of-bound memory access flaw was found in the way     dhclient processed a DHCP response packet. A malicious     DHCP server could potentially use this flaw to crash     dhclient processes running on DHCP client machines via     a crafted DHCP response packet.(CVE-2018-5732)

  - A resource-consumption flaw was discovered in the DHCP     server. dhcpd did not restrict the number of open     connections to OMAPI and failover ports. A remote     attacker able to establish TCP connections to one of     these ports could use this flaw to cause dhcpd to exit     unexpectedly, stop responding requests, or exhaust     system sockets (denial of service).(CVE-2016-2774)

  - It was found that the DHCP daemon did not properly     clean up closed OMAPI connections in certain cases. A     remote attacker able to connect to the OMAPI port could     use this flaw to exhaust file descriptors in the DHCP     daemon, leading to a denial of service in the OMAPI     functionality.(CVE-2017-3144)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for dhcp fixes several issues.

This security issue was fixed :

  - CVE-2017-3144: OMAPI code didn't free socket descriptors     when empty message is received allowing DoS     (bsc#1076119).

These non-security issues were fixed :

  - Optimized if and when DNS client context and ports are     initted (bsc#1073935)

  - Relax permission of dhclient-script for libguestfs     (bsc#987170)

  - Modify dhclient-script to handle static route updates     (bsc#1023415).

  - Use only the 12 least significant bits of an inbound     packet's TCI value as the VLAN ID to fix some packages     being wrongly discarded by the Linux packet filter.
    (bsc#1059061)

This update was imported from the SUSE:SLE-12-SP1:Update update project.

This update for dhcp fixes several issues. This security issue was fixed :

  - CVE-2017-3144: OMAPI code didn't free socket descriptors     when empty message is received allowing DoS     (bsc#1076119)

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the dhcp packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - It was found that the DHCP daemon did not properly     clean up closed OMAPI connections in certain cases. A     remote attacker able to connect to the OMAPI port could     use this flaw to exhaust file descriptors in the DHCP     daemon, leading to a denial of service in the OMAPI     functionality.(CVE-2017-3144)

  - DHCP packages in Red Hat Enterprise Linux 6 and 7,     Fedora 28, and earlier are vulnerable to a command     injection flaw in the NetworkManager integration script     included in the DHCP client. A malicious DHCP server,     or an attacker on the local network able to spoof DHCP     responses, could use this flaw to execute arbitrary     commands with root privileges on systems using     NetworkManager and configured to obtain network     configuration using the DHCP protocol.(CVE-2018-1111)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
108926	GLSA-201804-05 : ISC DHCP: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2018/4/10	2024/11/12	high
124946	EulerOS Virtualization 3.0.1.0 : dhcp (EulerOS-SA-2019-1443)	Nessus	Huawei Local Security Checks	2019/5/14	2022/5/20	high
106998	openSUSE Security Update : dhcp (openSUSE-2018-207)	Nessus	SuSE Local Security Checks	2018/2/26	2025/10/27	high
106836	SUSE SLES11 Security Update : dhcp (SUSE-SU-2018:0444-1)	Nessus	SuSE Local Security Checks	2018/2/15	2025/10/29	high
124882	EulerOS Virtualization for ARM 64 3.0.1.0 : dhcp (EulerOS-SA-2019-1379)	Nessus	Huawei Local Security Checks	2019/5/14	2025/3/20	high

检测

插件搜索

high

high

high

high

high