CVE-2009-0692 Memory corruption in n/a
Remote attackers can execute arbitrary code on systems running ISC DHCP client by sending a crafted subnet-mask option from a malicious DHCP server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2009-0692?
CVE-2009-0692 is a critical memory corruption vulnerability in n/a, published on 14 Jul 2009. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option.
Weakness: CWE-119
Which versions are affected by CVE-2009-0692?
It affects 1 product.
Linux distribution packages (24)
dhclient Red Hat:enterprise_linux:4::as | All versions | 7:3.0.1-65.el4_8.1 |
dhcp Red Hat:enterprise_linux:4::as | All versions | 7:3.0.1-65.el4_8.1 |
dhcp-debuginfo Red Hat:enterprise_linux:4::as | All versions | 7:3.0.1-65.el4_8.1 |
dhcp-devel Red Hat:enterprise_linux:4::as | All versions | 7:3.0.1-65.el4_8.1 |
dhclient Red Hat:enterprise_linux:4::desktop | All versions | 7:3.0.1-65.el4_8.1 |
dhcp Red Hat:enterprise_linux:4::desktop | All versions | 7:3.0.1-65.el4_8.1 |
dhcp-debuginfo Red Hat:enterprise_linux:4::desktop | All versions | 7:3.0.1-65.el4_8.1 |
dhcp-devel Red Hat:enterprise_linux:4::desktop | All versions | 7:3.0.1-65.el4_8.1 |
dhclient Red Hat:enterprise_linux:4::es | All versions | 7:3.0.1-65.el4_8.1 |
dhcp Red Hat:enterprise_linux:4::es | All versions | 7:3.0.1-65.el4_8.1 |
dhcp-debuginfo Red Hat:enterprise_linux:4::es | All versions | 7:3.0.1-65.el4_8.1 |
dhcp-devel Red Hat:enterprise_linux:4::es | All versions | 7:3.0.1-65.el4_8.1 |
dhclient Red Hat:enterprise_linux:4::ws | All versions | 7:3.0.1-65.el4_8.1 |
dhcp Red Hat:enterprise_linux:4::ws | All versions | 7:3.0.1-65.el4_8.1 |
dhcp-debuginfo Red Hat:enterprise_linux:4::ws | All versions | 7:3.0.1-65.el4_8.1 |
dhcp-devel Red Hat:enterprise_linux:4::ws | All versions | 7:3.0.1-65.el4_8.1 |
dhclient Red Hat:rhel_eus:4.7::as | All versions | 7:3.0.1-62.el4_7.1 |
dhcp Red Hat:rhel_eus:4.7::as | All versions | 7:3.0.1-62.el4_7.1 |
dhcp-debuginfo Red Hat:rhel_eus:4.7::as | All versions | 7:3.0.1-62.el4_7.1 |
dhcp-devel Red Hat:rhel_eus:4.7::as | All versions | 7:3.0.1-62.el4_7.1 |
dhclient Red Hat:rhel_eus:4.7::es | All versions | 7:3.0.1-62.el4_7.1 |
dhcp Red Hat:rhel_eus:4.7::es | All versions | 7:3.0.1-62.el4_7.1 |
dhcp-debuginfo Red Hat:rhel_eus:4.7::es | All versions | 7:3.0.1-62.el4_7.1 |
dhcp-devel Red Hat:rhel_eus:4.7::es | All versions | 7:3.0.1-62.el4_7.1 |
Products include Isc Dhcp.
How do I fix CVE-2009-0692?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2009-0692 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2009-0692 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as DSA-1833-1, GHSA-cjw8-pp44-m8v2, RHSA-2009:1136.