CVE-2018-5732 dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server

CVE ID

CVE-2018-5732

DESCRIPTION

An out-of-bound memory access flaw was found in the way dhclient processed a DHCP response packet. A malicious DHCP server could potentially use this flaw to crash dhclient processes running on DHCP client machines via a crafted DHCP response packet.

CVSS3 Base Score    7.5

RESOLUTION

 Apply Unitrends security update v10.26 from 03/09/2018 or later,
    containing dhclient-4.1.1-53.P1.el6.centos.1
 

LINK TO ADVISORIES

• https://access.redhat.com/security/cve/cve-2018-5732 https://access.redhat.com/errata/RHSA-2018:0469 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5732