Secunia

A vulnerability has been reported in ISC DHCP, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a user's system.

The vulnerability is caused due to a boundary error within the "script_write_params()" function in client/dhclient.c and can be exploited to cause a stack-based buffer overflow by sending an overly long subnet-mask option.

Successful exploitation may allow execution of arbitrary code with "root" privileges, but requires that dhclient processes a specially crafted response from a malicious DHCP server.

The vulnerability is reported in DHCP 2.0 through 4.1.

Solution
Update to 3.1.2p1, 4.0.1p1, or 4.1.0p1.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Mandriva Linux Engineering Team.

Original Advisory
ISC:
https://www.isc.org/node/468

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area