Issued:
2010-11-30
Updated:
2010-11-30

RHSA-2010:0923 - Security Advisory

Synopsis

Moderate: dhcp security update

Type/Severity

Security Advisory: Moderate

Topic

Updated dhcp packages that fix one security issue are now available for
Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.

Description

The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows
individual devices on an IP network to get their own network configuration
information, including an IP address, a subnet mask, and a broadcast
address. DHCPv6 is the DHCP protocol version for IPv6 networks.

A NULL pointer dereference flaw was discovered in the way the dhcpd daemon
parsed DHCPv6 packets. A remote attacker could use this flaw to crash dhcpd
via a specially-crafted DHCPv6 packet, if dhcpd was running as a DHCPv6
server. (CVE-2010-3611)

Users running dhcpd as a DHCPv6 server should upgrade to these updated
packages, which contain a backported patch to correct this issue. After
installing this update, all DHCP servers will be restarted automatically.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

  • Red Hat Enterprise Linux Server 6 x86_64
  • Red Hat Enterprise Linux Server 6 i386
  • Red Hat Enterprise Linux Workstation 6 x86_64
  • Red Hat Enterprise Linux Workstation 6 i386
  • Red Hat Enterprise Linux Desktop 6 x86_64
  • Red Hat Enterprise Linux Desktop 6 i386
  • Red Hat Enterprise Linux for IBM z Systems 6 s390x
  • Red Hat Enterprise Linux for Power, big endian 6 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 6 x86_64
  • Red Hat Enterprise Linux Server from RHUI 6 x86_64
  • Red Hat Enterprise Linux Server from RHUI 6 i386

Fixes

  • BZ - 649877 - CVE-2010-3611 dhcp: NULL pointer dereference crash via crafted DHCPv6 packet

CVEs

References

Red Hat Enterprise Linux Server 6

SRPM
dhcp-4.1.1-12.P1.el6_0.1.src.rpm SHA-256: 801370506558ee74d2c6500f4dd2827d099b2b501b8e11ee8cad680b815a8c5b
x86_64
dhclient-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: 2153c6b369f5f8bc36ad86dfe8d6c29c10399d6fb0361e56ca7b445b071b764e
dhcp-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: d41bedcb3bfdbd49f194cd82ab504ce7760f4cbbefc15ecc9ae2b25d8df29e48
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: 998ac8c02c49690dc7cd4679a397ccc756c2c43031a9bba44f2ccebb52ea935f
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: 0e0b0f930c972a690a1407db9936741952d743c3187385c1b2174dedaf4ee087
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: 0e0b0f930c972a690a1407db9936741952d743c3187385c1b2174dedaf4ee087
dhcp-devel-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: b5c64d1321c88da7178b2fbb6cc45fc4329dba3e37e5ad968f231d70b10b332f
dhcp-devel-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: fed797211c6536b38a4d7b94b049d1d721ca6d27ed675e384d7b4a95dfba9d5b
i386
dhclient-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: eabae876c268ffdb457ee8f56a4d0b6c6321f23880c5f7f87b8de06f95eaf3fd
dhcp-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: 4201950abfd657b210de011b5d2e707847b6878d14e2aa536ab28bde0d915930
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: 998ac8c02c49690dc7cd4679a397ccc756c2c43031a9bba44f2ccebb52ea935f
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: 998ac8c02c49690dc7cd4679a397ccc756c2c43031a9bba44f2ccebb52ea935f
dhcp-devel-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: b5c64d1321c88da7178b2fbb6cc45fc4329dba3e37e5ad968f231d70b10b332f

Red Hat Enterprise Linux Workstation 6

SRPM
dhcp-4.1.1-12.P1.el6_0.1.src.rpm SHA-256: 801370506558ee74d2c6500f4dd2827d099b2b501b8e11ee8cad680b815a8c5b
x86_64
dhclient-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: 2153c6b369f5f8bc36ad86dfe8d6c29c10399d6fb0361e56ca7b445b071b764e
dhcp-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: d41bedcb3bfdbd49f194cd82ab504ce7760f4cbbefc15ecc9ae2b25d8df29e48
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: 998ac8c02c49690dc7cd4679a397ccc756c2c43031a9bba44f2ccebb52ea935f
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: 0e0b0f930c972a690a1407db9936741952d743c3187385c1b2174dedaf4ee087
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: 0e0b0f930c972a690a1407db9936741952d743c3187385c1b2174dedaf4ee087
dhcp-devel-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: b5c64d1321c88da7178b2fbb6cc45fc4329dba3e37e5ad968f231d70b10b332f
dhcp-devel-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: fed797211c6536b38a4d7b94b049d1d721ca6d27ed675e384d7b4a95dfba9d5b
i386
dhclient-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: eabae876c268ffdb457ee8f56a4d0b6c6321f23880c5f7f87b8de06f95eaf3fd
dhcp-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: 4201950abfd657b210de011b5d2e707847b6878d14e2aa536ab28bde0d915930
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: 998ac8c02c49690dc7cd4679a397ccc756c2c43031a9bba44f2ccebb52ea935f
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: 998ac8c02c49690dc7cd4679a397ccc756c2c43031a9bba44f2ccebb52ea935f
dhcp-devel-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: b5c64d1321c88da7178b2fbb6cc45fc4329dba3e37e5ad968f231d70b10b332f

Red Hat Enterprise Linux Desktop 6

SRPM
dhcp-4.1.1-12.P1.el6_0.1.src.rpm SHA-256: 801370506558ee74d2c6500f4dd2827d099b2b501b8e11ee8cad680b815a8c5b
x86_64
dhclient-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: 2153c6b369f5f8bc36ad86dfe8d6c29c10399d6fb0361e56ca7b445b071b764e
dhcp-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: d41bedcb3bfdbd49f194cd82ab504ce7760f4cbbefc15ecc9ae2b25d8df29e48
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: 998ac8c02c49690dc7cd4679a397ccc756c2c43031a9bba44f2ccebb52ea935f
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: 0e0b0f930c972a690a1407db9936741952d743c3187385c1b2174dedaf4ee087
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: 0e0b0f930c972a690a1407db9936741952d743c3187385c1b2174dedaf4ee087
dhcp-devel-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: b5c64d1321c88da7178b2fbb6cc45fc4329dba3e37e5ad968f231d70b10b332f
dhcp-devel-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: fed797211c6536b38a4d7b94b049d1d721ca6d27ed675e384d7b4a95dfba9d5b
i386
dhclient-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: eabae876c268ffdb457ee8f56a4d0b6c6321f23880c5f7f87b8de06f95eaf3fd
dhcp-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: 4201950abfd657b210de011b5d2e707847b6878d14e2aa536ab28bde0d915930
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: 998ac8c02c49690dc7cd4679a397ccc756c2c43031a9bba44f2ccebb52ea935f
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: 998ac8c02c49690dc7cd4679a397ccc756c2c43031a9bba44f2ccebb52ea935f
dhcp-devel-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: b5c64d1321c88da7178b2fbb6cc45fc4329dba3e37e5ad968f231d70b10b332f

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
dhcp-4.1.1-12.P1.el6_0.1.src.rpm SHA-256: 801370506558ee74d2c6500f4dd2827d099b2b501b8e11ee8cad680b815a8c5b
s390x
dhclient-4.1.1-12.P1.el6_0.1.s390x.rpm SHA-256: fef442232570f9954926bdf3e60a1a1ab73c6768235e716d2c47a75daf70b508
dhcp-4.1.1-12.P1.el6_0.1.s390x.rpm SHA-256: cb92033f7cff0d56b26da7b126401cd2d02a64ee572674d88c6f56ea5b71a8f4
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.s390.rpm SHA-256: 5f8c81bb7dc85406e1422c00f46f8d6ea99138a99e520388ed6ca12571b19789
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.s390x.rpm SHA-256: f1e44378a25cd5f45602b58dd3a665b426f87cdff7f531c640be3639de78c6ee
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.s390x.rpm SHA-256: f1e44378a25cd5f45602b58dd3a665b426f87cdff7f531c640be3639de78c6ee
dhcp-devel-4.1.1-12.P1.el6_0.1.s390.rpm SHA-256: f42f0130c66cddd07076ee78b9a3d722e222d7ec9964fd180a1a3e1f93ebaca4
dhcp-devel-4.1.1-12.P1.el6_0.1.s390x.rpm SHA-256: be5a47938f9e85dfa061a08a684a85000993fe394be30238349e6f2d6d67d459

Red Hat Enterprise Linux for Power, big endian 6

SRPM
dhcp-4.1.1-12.P1.el6_0.1.src.rpm SHA-256: 801370506558ee74d2c6500f4dd2827d099b2b501b8e11ee8cad680b815a8c5b
ppc64
dhclient-4.1.1-12.P1.el6_0.1.ppc64.rpm SHA-256: 41c6ade118d3a8be6b23588b9ed43b7d7b9348578f4d34305b134f0f71a2bf92
dhcp-4.1.1-12.P1.el6_0.1.ppc64.rpm SHA-256: 926dbaeb8302b21c6706f62d518c44ea90c67d41f1beebaba2adf5abb58ea5d0
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.ppc.rpm SHA-256: 0426f7d946925ec811989553c33caf67d68097a6c386eb5e85ebaad185acbf58
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.ppc64.rpm SHA-256: 980c464bd2984e31516e9b7290999cabfd40637c5a94cfb3b2b83a3d972c5906
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.ppc64.rpm SHA-256: 980c464bd2984e31516e9b7290999cabfd40637c5a94cfb3b2b83a3d972c5906
dhcp-devel-4.1.1-12.P1.el6_0.1.ppc.rpm SHA-256: c8beb3ab0bc4e65e75d6d13b0d9b8add0d6ba2a7ce12f888456f0d1ae5a80f98
dhcp-devel-4.1.1-12.P1.el6_0.1.ppc64.rpm SHA-256: 3fb26e8f744f8fe8cf58e91088c4ad8fc3f308b2b701dd4c02ef50fd53e92fd4

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
dhcp-4.1.1-12.P1.el6_0.1.src.rpm SHA-256: 801370506558ee74d2c6500f4dd2827d099b2b501b8e11ee8cad680b815a8c5b
x86_64
dhclient-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: 2153c6b369f5f8bc36ad86dfe8d6c29c10399d6fb0361e56ca7b445b071b764e
dhcp-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: d41bedcb3bfdbd49f194cd82ab504ce7760f4cbbefc15ecc9ae2b25d8df29e48
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: 998ac8c02c49690dc7cd4679a397ccc756c2c43031a9bba44f2ccebb52ea935f
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: 0e0b0f930c972a690a1407db9936741952d743c3187385c1b2174dedaf4ee087
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: 0e0b0f930c972a690a1407db9936741952d743c3187385c1b2174dedaf4ee087
dhcp-devel-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: b5c64d1321c88da7178b2fbb6cc45fc4329dba3e37e5ad968f231d70b10b332f
dhcp-devel-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: fed797211c6536b38a4d7b94b049d1d721ca6d27ed675e384d7b4a95dfba9d5b

Red Hat Enterprise Linux Server from RHUI 6

SRPM
dhcp-4.1.1-12.P1.el6_0.1.src.rpm SHA-256: 801370506558ee74d2c6500f4dd2827d099b2b501b8e11ee8cad680b815a8c5b
x86_64
dhclient-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: 2153c6b369f5f8bc36ad86dfe8d6c29c10399d6fb0361e56ca7b445b071b764e
dhcp-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: d41bedcb3bfdbd49f194cd82ab504ce7760f4cbbefc15ecc9ae2b25d8df29e48
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: 998ac8c02c49690dc7cd4679a397ccc756c2c43031a9bba44f2ccebb52ea935f
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: 0e0b0f930c972a690a1407db9936741952d743c3187385c1b2174dedaf4ee087
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: 0e0b0f930c972a690a1407db9936741952d743c3187385c1b2174dedaf4ee087
dhcp-devel-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: b5c64d1321c88da7178b2fbb6cc45fc4329dba3e37e5ad968f231d70b10b332f
dhcp-devel-4.1.1-12.P1.el6_0.1.x86_64.rpm SHA-256: fed797211c6536b38a4d7b94b049d1d721ca6d27ed675e384d7b4a95dfba9d5b
i386
dhclient-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: eabae876c268ffdb457ee8f56a4d0b6c6321f23880c5f7f87b8de06f95eaf3fd
dhcp-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: 4201950abfd657b210de011b5d2e707847b6878d14e2aa536ab28bde0d915930
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: 998ac8c02c49690dc7cd4679a397ccc756c2c43031a9bba44f2ccebb52ea935f
dhcp-debuginfo-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: 998ac8c02c49690dc7cd4679a397ccc756c2c43031a9bba44f2ccebb52ea935f
dhcp-devel-4.1.1-12.P1.el6_0.1.i686.rpm SHA-256: b5c64d1321c88da7178b2fbb6cc45fc4329dba3e37e5ad968f231d70b10b332f

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.