ISC.Dhclient.DHCP.Stack.Overflow

Description

This indicates an attack attempt against a buffer-overflow vulnerability in ISC dhclient.
The vulnerability is caused by an error when the vulnerable software handles a malicious dhcp server response. It allows a remote attacker to execute arbitrary code via sending a crafted dhcp server response packet.

Affected Products

DHCP 4.1 (all versions)
DHCP 4.0 (all versions)
DHCP 3.1 (all versions)
DHCP 3.0 (all versions)
DHCP 2.0 (all versions)

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Upgrade to 4.1.0p1, 4.0.1p1, or 3.1.2p1.

References