Issued:
2018-05-15
Updated:
2018-05-15

RHSA-2018:1456 - Security Advisory

Synopsis

Critical: dhcp security update

Type/Severity

Security Advisory: Critical

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for dhcp is now available for Red Hat Enterprise Linux 7.3 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network.

Security Fix(es):

  • A command injection flaw was found in the NetworkManager integration script included in the DHCP client packages in Red Hat Enterprise Linux. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol. (CVE-2018-1111)

Red Hat would like to thank Felix Wilhelm (Google Security Team) for reporting this issue.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
  • Red Hat Enterprise Linux EUS Compute Node 7.3 x86_64
  • Red Hat Enterprise Linux Server - AUS 7.3 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.3 s390x
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.3 ppc64
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.3 ppc64le
  • Red Hat Enterprise Linux Server - TUS 7.3 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.3 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64

Fixes

  • BZ - 1567974 - CVE-2018-1111 dhcp: Command injection vulnerability in the DHCP client NetworkManager integration script

Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3

SRPM
dhcp-4.2.5-47.el7_3.1.src.rpm SHA-256: fcc31f1fa3329fbf28a8d66108093c83974e3deeb1266c68f1680d93f8d47ca6
x86_64
dhclient-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 8eb235b98bc569ff44074869694d23230e35f016a030175b014f9ccba7c83039
dhcp-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 8daf394c3089ce9e7d515e69ae9b17dd27e437b371c248260de937e7a92d767e
dhcp-common-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 086c2e4bdcdfaed34148ae5eb6212f763bbb4d8c93c3ee2cc08d49f2c00d782c
dhcp-debuginfo-4.2.5-47.el7_3.1.i686.rpm SHA-256: 844472636e20b2bf3ca25b1bd0ae87c390bc9616def68983a90e09df5a5244cd
dhcp-debuginfo-4.2.5-47.el7_3.1.i686.rpm SHA-256: 844472636e20b2bf3ca25b1bd0ae87c390bc9616def68983a90e09df5a5244cd
dhcp-debuginfo-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: b8988dbdc6e12ad41a5f0df7e5f03bae01711b0a9c1a1a341c3f834a7a2d4258
dhcp-debuginfo-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: b8988dbdc6e12ad41a5f0df7e5f03bae01711b0a9c1a1a341c3f834a7a2d4258
dhcp-devel-4.2.5-47.el7_3.1.i686.rpm SHA-256: e4cb1853455ae8a680e17c5bbe2863ca8716d91438444f5bbc9e90e71d3184ae
dhcp-devel-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 5897db58712d59811fc74a99d0693217b05e732a9ba806fa8a6809e42acd3f95
dhcp-libs-4.2.5-47.el7_3.1.i686.rpm SHA-256: bde27b42c798d213698f02ffd058b6c8063faa23e20c89a1c847f0adbf3de052
dhcp-libs-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 91521cde1c8c826674c8d44bfa056ec4a7b3cf179e9d17509ad08178d1217d2d

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.3

SRPM
dhcp-4.2.5-47.el7_3.1.src.rpm SHA-256: fcc31f1fa3329fbf28a8d66108093c83974e3deeb1266c68f1680d93f8d47ca6
s390x
dhclient-4.2.5-47.el7_3.1.s390x.rpm SHA-256: 8aa58cd019c97e610285868b299aa00026cafc7db119cbca04926c642f89baae
dhcp-4.2.5-47.el7_3.1.s390x.rpm SHA-256: 68897ad771d3935ebdf8eda8502d9b3561d43ed8e99207f34773584ae9c6bef3
dhcp-common-4.2.5-47.el7_3.1.s390x.rpm SHA-256: 00de3abb684efd405b718c2380877d43f58ac6be821e45a091c91bfd381bedda
dhcp-debuginfo-4.2.5-47.el7_3.1.s390.rpm SHA-256: bc8c7b94bf74fa8826acd71a0bfb0c3a68410a5878a49a03c80a043e752a08e9
dhcp-debuginfo-4.2.5-47.el7_3.1.s390.rpm SHA-256: bc8c7b94bf74fa8826acd71a0bfb0c3a68410a5878a49a03c80a043e752a08e9
dhcp-debuginfo-4.2.5-47.el7_3.1.s390x.rpm SHA-256: 2305575fe0a7bdfeb630d2584e151d406298dfc94a7923be62001fb457a9048d
dhcp-debuginfo-4.2.5-47.el7_3.1.s390x.rpm SHA-256: 2305575fe0a7bdfeb630d2584e151d406298dfc94a7923be62001fb457a9048d
dhcp-devel-4.2.5-47.el7_3.1.s390.rpm SHA-256: 2064fd6c6ba847b5528984299242f32ac8b965b19daead2306497f053c503441
dhcp-devel-4.2.5-47.el7_3.1.s390x.rpm SHA-256: f72a76646c3920df4af3768bbdea33763968eef33cad5fe996b17b2907996c3e
dhcp-libs-4.2.5-47.el7_3.1.s390.rpm SHA-256: 7ef9ff8cf193f6f9d2736ac533fc1981376c8307eae29a59946f72beaad6df2a
dhcp-libs-4.2.5-47.el7_3.1.s390x.rpm SHA-256: 6520d9e2f436d3bf3ccae1fb1fb707f152851313d8928d5b4aacd21de32f041d

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.3

SRPM
dhcp-4.2.5-47.el7_3.1.src.rpm SHA-256: fcc31f1fa3329fbf28a8d66108093c83974e3deeb1266c68f1680d93f8d47ca6
ppc64
dhclient-4.2.5-47.el7_3.1.ppc64.rpm SHA-256: 03aecf4724ad3f484f45402ccfbff40cbfdb4ef481edeaa24b974f33b53bb6a2
dhcp-4.2.5-47.el7_3.1.ppc64.rpm SHA-256: f5def7a6b9cd6b31758e63577f8e0f28976a74a62405038ade160bdb3eeb82ef
dhcp-common-4.2.5-47.el7_3.1.ppc64.rpm SHA-256: bfd50097436e4dedbd350aa32731f9c7f83ccadb76f68503d04e37b19e542775
dhcp-debuginfo-4.2.5-47.el7_3.1.ppc.rpm SHA-256: 43ad3b1c4b12b29cca2cc9a084786221c9e70f5aacdbf9e7dc33845f8e09ac6f
dhcp-debuginfo-4.2.5-47.el7_3.1.ppc.rpm SHA-256: 43ad3b1c4b12b29cca2cc9a084786221c9e70f5aacdbf9e7dc33845f8e09ac6f
dhcp-debuginfo-4.2.5-47.el7_3.1.ppc64.rpm SHA-256: b6056a91372dbd5ace0bdfe3cca9140d4aeea8c62b56f43998026114630dcb71
dhcp-debuginfo-4.2.5-47.el7_3.1.ppc64.rpm SHA-256: b6056a91372dbd5ace0bdfe3cca9140d4aeea8c62b56f43998026114630dcb71
dhcp-devel-4.2.5-47.el7_3.1.ppc.rpm SHA-256: 7d7fcd88838977a88a153b2954e9a0f605ab422d108f47be0f8b82751e36bbdb
dhcp-devel-4.2.5-47.el7_3.1.ppc64.rpm SHA-256: d885b764c99d670a0fa19c5d2d3daa158efe8184a2c17d2ba5a4062c607e54ac
dhcp-libs-4.2.5-47.el7_3.1.ppc.rpm SHA-256: 19301e8d074ed1e32a679a4dfd6d50b9765375b6028cd32df6e722478c13a72c
dhcp-libs-4.2.5-47.el7_3.1.ppc64.rpm SHA-256: cb919edaf3193bd3d35201b030e7675138605f7dd1c80e612d66407b5d939691

Red Hat Enterprise Linux EUS Compute Node 7.3

SRPM
dhcp-4.2.5-47.el7_3.1.src.rpm SHA-256: fcc31f1fa3329fbf28a8d66108093c83974e3deeb1266c68f1680d93f8d47ca6
x86_64
dhclient-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 8eb235b98bc569ff44074869694d23230e35f016a030175b014f9ccba7c83039
dhcp-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 8daf394c3089ce9e7d515e69ae9b17dd27e437b371c248260de937e7a92d767e
dhcp-common-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 086c2e4bdcdfaed34148ae5eb6212f763bbb4d8c93c3ee2cc08d49f2c00d782c
dhcp-debuginfo-4.2.5-47.el7_3.1.i686.rpm SHA-256: 844472636e20b2bf3ca25b1bd0ae87c390bc9616def68983a90e09df5a5244cd
dhcp-debuginfo-4.2.5-47.el7_3.1.i686.rpm SHA-256: 844472636e20b2bf3ca25b1bd0ae87c390bc9616def68983a90e09df5a5244cd
dhcp-debuginfo-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: b8988dbdc6e12ad41a5f0df7e5f03bae01711b0a9c1a1a341c3f834a7a2d4258
dhcp-debuginfo-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: b8988dbdc6e12ad41a5f0df7e5f03bae01711b0a9c1a1a341c3f834a7a2d4258
dhcp-devel-4.2.5-47.el7_3.1.i686.rpm SHA-256: e4cb1853455ae8a680e17c5bbe2863ca8716d91438444f5bbc9e90e71d3184ae
dhcp-devel-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 5897db58712d59811fc74a99d0693217b05e732a9ba806fa8a6809e42acd3f95
dhcp-libs-4.2.5-47.el7_3.1.i686.rpm SHA-256: bde27b42c798d213698f02ffd058b6c8063faa23e20c89a1c847f0adbf3de052
dhcp-libs-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 91521cde1c8c826674c8d44bfa056ec4a7b3cf179e9d17509ad08178d1217d2d

Red Hat Enterprise Linux Server - AUS 7.3

SRPM
dhcp-4.2.5-47.el7_3.1.src.rpm SHA-256: fcc31f1fa3329fbf28a8d66108093c83974e3deeb1266c68f1680d93f8d47ca6
x86_64
dhclient-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 8eb235b98bc569ff44074869694d23230e35f016a030175b014f9ccba7c83039
dhcp-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 8daf394c3089ce9e7d515e69ae9b17dd27e437b371c248260de937e7a92d767e
dhcp-common-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 086c2e4bdcdfaed34148ae5eb6212f763bbb4d8c93c3ee2cc08d49f2c00d782c
dhcp-debuginfo-4.2.5-47.el7_3.1.i686.rpm SHA-256: 844472636e20b2bf3ca25b1bd0ae87c390bc9616def68983a90e09df5a5244cd
dhcp-debuginfo-4.2.5-47.el7_3.1.i686.rpm SHA-256: 844472636e20b2bf3ca25b1bd0ae87c390bc9616def68983a90e09df5a5244cd
dhcp-debuginfo-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: b8988dbdc6e12ad41a5f0df7e5f03bae01711b0a9c1a1a341c3f834a7a2d4258
dhcp-debuginfo-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: b8988dbdc6e12ad41a5f0df7e5f03bae01711b0a9c1a1a341c3f834a7a2d4258
dhcp-devel-4.2.5-47.el7_3.1.i686.rpm SHA-256: e4cb1853455ae8a680e17c5bbe2863ca8716d91438444f5bbc9e90e71d3184ae
dhcp-devel-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 5897db58712d59811fc74a99d0693217b05e732a9ba806fa8a6809e42acd3f95
dhcp-libs-4.2.5-47.el7_3.1.i686.rpm SHA-256: bde27b42c798d213698f02ffd058b6c8063faa23e20c89a1c847f0adbf3de052
dhcp-libs-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 91521cde1c8c826674c8d44bfa056ec4a7b3cf179e9d17509ad08178d1217d2d

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.3

SRPM
dhcp-4.2.5-47.el7_3.1.src.rpm SHA-256: fcc31f1fa3329fbf28a8d66108093c83974e3deeb1266c68f1680d93f8d47ca6
ppc64le
dhclient-4.2.5-47.el7_3.1.ppc64le.rpm SHA-256: 0b8b147ca36d122082c24e2cb48bec669fe290e24a11b25c377c4fad2d7f0e0c
dhcp-4.2.5-47.el7_3.1.ppc64le.rpm SHA-256: 6aac769f4bee8a6e3d4adde67cd33911726386471cb7446cbd367f6909de964e
dhcp-common-4.2.5-47.el7_3.1.ppc64le.rpm SHA-256: d8deb83e5a734a5f5cf741b5df8892ad52c32593978a51528593810c6119aa8d
dhcp-debuginfo-4.2.5-47.el7_3.1.ppc64le.rpm SHA-256: 0fae1e94a7ac0d439defc0e8e706c1daba5c88e4322320996d5d9b01f0ce3a80
dhcp-debuginfo-4.2.5-47.el7_3.1.ppc64le.rpm SHA-256: 0fae1e94a7ac0d439defc0e8e706c1daba5c88e4322320996d5d9b01f0ce3a80
dhcp-devel-4.2.5-47.el7_3.1.ppc64le.rpm SHA-256: 429da13638b1b9e3c885dd5247a0762c76a3762ba27dacfca714f98f82c631bf
dhcp-libs-4.2.5-47.el7_3.1.ppc64le.rpm SHA-256: 353757971114476583e7e022013e01d66da109ed45cdc736d5beb5f7b26f4a89

Red Hat Enterprise Linux Server - TUS 7.3

SRPM
dhcp-4.2.5-47.el7_3.1.src.rpm SHA-256: fcc31f1fa3329fbf28a8d66108093c83974e3deeb1266c68f1680d93f8d47ca6
x86_64
dhclient-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 8eb235b98bc569ff44074869694d23230e35f016a030175b014f9ccba7c83039
dhcp-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 8daf394c3089ce9e7d515e69ae9b17dd27e437b371c248260de937e7a92d767e
dhcp-common-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 086c2e4bdcdfaed34148ae5eb6212f763bbb4d8c93c3ee2cc08d49f2c00d782c
dhcp-debuginfo-4.2.5-47.el7_3.1.i686.rpm SHA-256: 844472636e20b2bf3ca25b1bd0ae87c390bc9616def68983a90e09df5a5244cd
dhcp-debuginfo-4.2.5-47.el7_3.1.i686.rpm SHA-256: 844472636e20b2bf3ca25b1bd0ae87c390bc9616def68983a90e09df5a5244cd
dhcp-debuginfo-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: b8988dbdc6e12ad41a5f0df7e5f03bae01711b0a9c1a1a341c3f834a7a2d4258
dhcp-debuginfo-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: b8988dbdc6e12ad41a5f0df7e5f03bae01711b0a9c1a1a341c3f834a7a2d4258
dhcp-devel-4.2.5-47.el7_3.1.i686.rpm SHA-256: e4cb1853455ae8a680e17c5bbe2863ca8716d91438444f5bbc9e90e71d3184ae
dhcp-devel-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 5897db58712d59811fc74a99d0693217b05e732a9ba806fa8a6809e42acd3f95
dhcp-libs-4.2.5-47.el7_3.1.i686.rpm SHA-256: bde27b42c798d213698f02ffd058b6c8063faa23e20c89a1c847f0adbf3de052
dhcp-libs-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 91521cde1c8c826674c8d44bfa056ec4a7b3cf179e9d17509ad08178d1217d2d

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.3

SRPM
dhcp-4.2.5-47.el7_3.1.src.rpm SHA-256: fcc31f1fa3329fbf28a8d66108093c83974e3deeb1266c68f1680d93f8d47ca6
ppc64le
dhclient-4.2.5-47.el7_3.1.ppc64le.rpm SHA-256: 0b8b147ca36d122082c24e2cb48bec669fe290e24a11b25c377c4fad2d7f0e0c
dhcp-4.2.5-47.el7_3.1.ppc64le.rpm SHA-256: 6aac769f4bee8a6e3d4adde67cd33911726386471cb7446cbd367f6909de964e
dhcp-common-4.2.5-47.el7_3.1.ppc64le.rpm SHA-256: d8deb83e5a734a5f5cf741b5df8892ad52c32593978a51528593810c6119aa8d
dhcp-debuginfo-4.2.5-47.el7_3.1.ppc64le.rpm SHA-256: 0fae1e94a7ac0d439defc0e8e706c1daba5c88e4322320996d5d9b01f0ce3a80
dhcp-debuginfo-4.2.5-47.el7_3.1.ppc64le.rpm SHA-256: 0fae1e94a7ac0d439defc0e8e706c1daba5c88e4322320996d5d9b01f0ce3a80
dhcp-devel-4.2.5-47.el7_3.1.ppc64le.rpm SHA-256: 429da13638b1b9e3c885dd5247a0762c76a3762ba27dacfca714f98f82c631bf
dhcp-libs-4.2.5-47.el7_3.1.ppc64le.rpm SHA-256: 353757971114476583e7e022013e01d66da109ed45cdc736d5beb5f7b26f4a89

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3

SRPM
dhcp-4.2.5-47.el7_3.1.src.rpm SHA-256: fcc31f1fa3329fbf28a8d66108093c83974e3deeb1266c68f1680d93f8d47ca6
x86_64
dhclient-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 8eb235b98bc569ff44074869694d23230e35f016a030175b014f9ccba7c83039
dhcp-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 8daf394c3089ce9e7d515e69ae9b17dd27e437b371c248260de937e7a92d767e
dhcp-common-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 086c2e4bdcdfaed34148ae5eb6212f763bbb4d8c93c3ee2cc08d49f2c00d782c
dhcp-debuginfo-4.2.5-47.el7_3.1.i686.rpm SHA-256: 844472636e20b2bf3ca25b1bd0ae87c390bc9616def68983a90e09df5a5244cd
dhcp-debuginfo-4.2.5-47.el7_3.1.i686.rpm SHA-256: 844472636e20b2bf3ca25b1bd0ae87c390bc9616def68983a90e09df5a5244cd
dhcp-debuginfo-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: b8988dbdc6e12ad41a5f0df7e5f03bae01711b0a9c1a1a341c3f834a7a2d4258
dhcp-debuginfo-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: b8988dbdc6e12ad41a5f0df7e5f03bae01711b0a9c1a1a341c3f834a7a2d4258
dhcp-devel-4.2.5-47.el7_3.1.i686.rpm SHA-256: e4cb1853455ae8a680e17c5bbe2863ca8716d91438444f5bbc9e90e71d3184ae
dhcp-devel-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 5897db58712d59811fc74a99d0693217b05e732a9ba806fa8a6809e42acd3f95
dhcp-libs-4.2.5-47.el7_3.1.i686.rpm SHA-256: bde27b42c798d213698f02ffd058b6c8063faa23e20c89a1c847f0adbf3de052
dhcp-libs-4.2.5-47.el7_3.1.x86_64.rpm SHA-256: 91521cde1c8c826674c8d44bfa056ec4a7b3cf179e9d17509ad08178d1217d2d

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.