CVE-2007-5030 Integer overflow in n/a
Remote attackers can crash the Dibbler DHCP server by sending packets with large option lengths, causing excessive memory allocation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-5030?
CVE-2007-5030 is a medium-severity vulnerability in n/a, published on 21 Sep 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple integer overflows in Dibbler 0.6.0 allow remote attackers to cause a denial of service (daemon crash) via packets containing options with large lengths, which trigger attempts at excessive memory allocation, as demonstrated by (1) the TSrvMsg constructor in SrvMessages/SrvMsg.cpp; the (2) TClntMsg, (3) TClntOptIAAddress, (4) TClntOptIAPrefix, (5) TOptVendorSpecInfo, and (6) TOptOptionRequest constructors; and the (7) TRelIfaceMgr::decodeRelayRepl, (8) TRelMsg::decodeOpts, and (9) TSrvIfaceMgr::decodeRelayForw methods.
Weakness: CWE-189
Which versions are affected by CVE-2007-5030?
It affects 1 product.
Products include Dibbler Dibbler.
How do I fix CVE-2007-5030?
Upgrade to a fixed version.
Is CVE-2007-5030 being exploited?
There is no known exploitation of CVE-2007-5030 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2007-5030, GHSA-4gm6-249c-rcvg.