• info
• discussion
• exploit
• solution
• references

ISC Memory.C DHCP Server Denial Of Service Vulnerability

Solution:
The vendor has released an advisory to address the issue. The vendor has also stated that DHCP 2.x is end-of-life software, so users may want to upgrade to a current version. Please see the referenced advisories for more information.


OpenBSD OpenBSD 3.9

• OpenBSD 006_dhcpd.patch
  ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.9/common/006_dhcpd.patch

OpenBSD OpenBSD 3.8

• OpenBSD 011_dhcpd.patch
  ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/011_dhcpd.patch

ISC DHCPD 2.0.pl5

• Debian dhcp-client_2.0pl5-19.1sarge2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-client_2.0pl5 -19.1sarge2_alpha.deb


• Debian dhcp-client_2.0pl5-19.1sarge2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-client_2.0pl5 -19.1sarge2_amd64.deb


• Debian dhcp-client_2.0pl5-19.1sarge2_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-client_2.0pl5 -19.1sarge2_arm.deb


• Debian dhcp-client_2.0pl5-19.1sarge2_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-client_2.0pl5 -19.1sarge2_hppa.deb


• Debian dhcp-client_2.0pl5-19.1sarge2_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-client_2.0pl5 -19.1sarge2_i386.deb


• Debian dhcp-client_2.0pl5-19.1sarge2_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-client_2.0pl5 -19.1sarge2_ia64.deb


• Debian dhcp-client_2.0pl5-19.1sarge2_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-client_2.0pl5 -19.1sarge2_m68k.deb


• Debian dhcp-client_2.0pl5-19.1sarge2_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-client_2.0pl5 -19.1sarge2_mips.deb


• Debian dhcp-client_2.0pl5-19.1sarge2_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-client_2.0pl5 -19.1sarge2_mipsel.deb


• Debian dhcp-client_2.0pl5-19.1sarge2_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-client_2.0pl5 -19.1sarge2_powerpc.deb


• Debian dhcp-client_2.0pl5-19.1sarge2_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-client_2.0pl5 -19.1sarge2_s390.deb


• Debian dhcp-client_2.0pl5-19.1sarge2_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-client_2.0pl5 -19.1sarge2_sparc.deb


• Debian dhcp-relay_2.0pl5-19.1sarge2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-relay_2.0pl5- 19.1sarge2_alpha.deb


• Debian dhcp-relay_2.0pl5-19.1sarge2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-relay_2.0pl5- 19.1sarge2_amd64.deb


• Debian dhcp-relay_2.0pl5-19.1sarge2_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-relay_2.0pl5- 19.1sarge2_arm.deb


• Debian dhcp-relay_2.0pl5-19.1sarge2_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-relay_2.0pl5- 19.1sarge2_hppa.deb


• Debian dhcp-relay_2.0pl5-19.1sarge2_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-relay_2.0pl5- 19.1sarge2_i386.deb


• Debian dhcp-relay_2.0pl5-19.1sarge2_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-relay_2.0pl5- 19.1sarge2_ia64.deb


• Debian dhcp-relay_2.0pl5-19.1sarge2_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-relay_2.0pl5- 19.1sarge2_m68k.deb


• Debian dhcp-relay_2.0pl5-19.1sarge2_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-relay_2.0pl5- 19.1sarge2_mips.deb


• Debian dhcp-relay_2.0pl5-19.1sarge2_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-relay_2.0pl5- 19.1sarge2_mipsel.deb


• Debian dhcp-relay_2.0pl5-19.1sarge2_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-relay_2.0pl5- 19.1sarge2_powerpc.deb


• Debian dhcp-relay_2.0pl5-19.1sarge2_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-relay_2.0pl5- 19.1sarge2_s390.deb


• Debian dhcp-relay_2.0pl5-19.1sarge2_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp-relay_2.0pl5- 19.1sarge2_sparc.deb


• Debian dhcp_2.0pl5-19.1sarge2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp_2.0pl5-19.1sa rge2_alpha.deb


• Debian dhcp_2.0pl5-19.1sarge2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp_2.0pl5-19.1sa rge2_amd64.deb


• Debian dhcp_2.0pl5-19.1sarge2_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp_2.0pl5-19.1sa rge2_arm.deb


• Debian dhcp_2.0pl5-19.1sarge2_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp_2.0pl5-19.1sa rge2_hppa.deb


• Debian dhcp_2.0pl5-19.1sarge2_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp_2.0pl5-19.1sa rge2_i386.deb


• Debian dhcp_2.0pl5-19.1sarge2_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp_2.0pl5-19.1sa rge2_ia64.deb


• Debian dhcp_2.0pl5-19.1sarge2_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp_2.0pl5-19.1sa rge2_m68k.deb


• Debian dhcp_2.0pl5-19.1sarge2_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp_2.0pl5-19.1sa rge2_mips.deb


• Debian dhcp_2.0pl5-19.1sarge2_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp_2.0pl5-19.1sa rge2_mipsel.deb


• Debian dhcp_2.0pl5-19.1sarge2_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp_2.0pl5-19.1sa rge2_powerpc.deb


• Debian dhcp_2.0pl5-19.1sarge2_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp_2.0pl5-19.1sa rge2_s390.deb


• Debian dhcp_2.0pl5-19.1sarge2_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/d/dhcp/dhcp_2.0pl5-19.1sa rge2_sparc.deb