CVE-2009-0692

Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

25.78% chance of exploitation in the next 30 days, 98th percentile

Published

2009-07-14

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/9265

Security advisories

• http://secunia.com/advisories/35785
• https://www.isc.org/node/468
• http://www.kb.cert.org/vuls/id/410676
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:151
• http://www.redhat.com/support/errata/RHSA-2009-1136.html
• http://www.redhat.com/support/errata/RHSA-2009-1154.html
• http://www.securityfocus.com/bid/35668
• http://www.ubuntu.com/usn/usn-803-1

References

• CVE Record
• NVD entry