CVE-2009-0692

Currently unrated

Key Information:

Vendor
Isc
Status
Dhcp
Vendor
CVE Published:
14 July 2009

Summary

Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option.

References

http://www.vupen.com/english/advisories/2009/1891
vdb-entryx_refsource_VUPEN
https://www.isc.org/node/468
x_refsource_CONFIRM
http://secunia.com/advisories/35830
third-party-advisoryx_refsource_SECUNIA

EPSS Score

12% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.