[ GLSA 201301-06 ] ISC DHCP: Denial of Service

[GLSA]

Gentoo Linux Security Advisory

Title: ISC DHCP: Denial of Service (GLSA 201301-06)
Severity: normal
Exploitable: remote
Date: January 09, 2013
Bug(s): #362453, #378799, #393617, #398763, #428120, #434880
ID: 201301-06

Synopsis

Multiple vulnerabilities have been found in ISC DHCP, the worst of
which may allow remote Denial of Service.


Background

ISC DHCP is a Dynamic Host Configuration Protocol (DHCP) client/server.

Affected Packages

Package: net-misc/dhcp
Vulnerable: < 4.2.4_p2
Unaffected: >= 4.2.4_p2
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in ISC DHCP. Please review
the CVE identifiers referenced below for details.


Impact

The vulnerabilities might allow remote attackers to execute arbitrary
code or cause a Denial of Service.


Workaround

There is no known workaround at this time.

Resolution

All ISC DHCP users should upgrade to the latest version: