Description
Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a DHCP request specifying a maximum message size smaller than the minimum IP MTU.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-1388-1 | New dhcp packages fix arbitrary code execution |
Debian DSA |
DSA-1388-3 | New dhcp packages fix arbitrary code execution |
Ubuntu USN |
USN-531-1 | dhcp vulnerability |
Ubuntu USN |
USN-531-2 | dhcp vulnerability |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T15:31:57.167Z
Reserved: 2007-10-10T00:00:00.000Z
Link: CVE-2007-5365
No data.
Status : Modified
Published: 2007-10-11T10:17:00.000
Modified: 2026-04-23T00:35:47.467
Link: CVE-2007-5365
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
Ubuntu USN