Synopsis

Critical: dhcp security update

Type/Severity

Security Advisory: Critical

Topic

An update for dhcp is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support, Red Hat Enterprise Linux 7.2 Telco Extended Update Support, and Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network.

Security Fix(es):

• A command injection flaw was found in the NetworkManager integration script included in the DHCP client packages in Red Hat Enterprise Linux. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol. (CVE-2018-1111)
  

Red Hat would like to thank Felix Wilhelm (Google Security Team) for reporting this issue.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server - AUS 7.2 x86_64
• Red Hat Enterprise Linux Server - TUS 7.2 x86_64
• Red Hat Enterprise Linux Server - Update Services for SAP Solutions 7.2 x86_64

Fixes

• BZ - 1567974 - CVE-2018-1111 dhcp: Command injection vulnerability in the DHCP client NetworkManager integration script

CVEs

• CVE-2018-1111

References

• https://access.redhat.com/security/updates/classification/#critical
• https://access.redhat.com/security/vulnerabilities/3442151

Red Hat Enterprise Linux Server - AUS 7.2

SRPM
dhcp-4.2.5-42.el7_2.1.src.rpm	SHA-256: a4c9a8b3aefbc63b3c69828535175a23587c51d4516bc52a79de685876b2e2ec
x86_64
dhclient-4.2.5-42.el7_2.1.x86_64.rpm	SHA-256: ad4af53fd7151bccbbf355146a9724e7e5d99fd4944376c72e99248e04afa3b9
dhcp-4.2.5-42.el7_2.1.x86_64.rpm	SHA-256: e528fa33dd2bb08a65f00742fcdc8f1f20f0d71e14ada8d638adde02f5201cdf
dhcp-common-4.2.5-42.el7_2.1.x86_64.rpm	SHA-256: f91cda853643698e642535cafb73dd3e10602ec5f9350cb5e477ea8aebd52585
dhcp-debuginfo-4.2.5-42.el7_2.1.i686.rpm	SHA-256: c0d58c3671a4ff3f71106c17d0b67beba57416c80a20da1b6a7fd7005aff8ba7
dhcp-debuginfo-4.2.5-42.el7_2.1.i686.rpm	SHA-256: c0d58c3671a4ff3f71106c17d0b67beba57416c80a20da1b6a7fd7005aff8ba7
dhcp-debuginfo-4.2.5-42.el7_2.1.x86_64.rpm	SHA-256: f0d148e45b9e3ffe35fc4bc358d05af9b7501bd1c5e71ce23cda1808878fe19b
dhcp-debuginfo-4.2.5-42.el7_2.1.x86_64.rpm	SHA-256: f0d148e45b9e3ffe35fc4bc358d05af9b7501bd1c5e71ce23cda1808878fe19b
dhcp-devel-4.2.5-42.el7_2.1.i686.rpm	SHA-256: 47debf0b3656377292855b08e7b66788aa70e08355ba020d59cab86bfb5ee5a2
dhcp-devel-4.2.5-42.el7_2.1.x86_64.rpm	SHA-256: 4c5d2a618820ead38e40c1976662bf4d35e024815eb166bab7b955a126a71b14
dhcp-libs-4.2.5-42.el7_2.1.i686.rpm	SHA-256: 876e2816c88990f492b795926e9efa6da8366f1bf61699562bc3e409a8cb2a4d
dhcp-libs-4.2.5-42.el7_2.1.x86_64.rpm	SHA-256: edbdc01b0c2f3e517e68934fd1bc82f21b6ea137bcfe1424f79e404bb48243db

Red Hat Enterprise Linux Server - TUS 7.2

SRPM
dhcp-4.2.5-42.el7_2.1.src.rpm	SHA-256: a4c9a8b3aefbc63b3c69828535175a23587c51d4516bc52a79de685876b2e2ec
x86_64
dhclient-4.2.5-42.el7_2.1.x86_64.rpm	SHA-256: ad4af53fd7151bccbbf355146a9724e7e5d99fd4944376c72e99248e04afa3b9
dhcp-4.2.5-42.el7_2.1.x86_64.rpm	SHA-256: e528fa33dd2bb08a65f00742fcdc8f1f20f0d71e14ada8d638adde02f5201cdf
dhcp-common-4.2.5-42.el7_2.1.x86_64.rpm	SHA-256: f91cda853643698e642535cafb73dd3e10602ec5f9350cb5e477ea8aebd52585
dhcp-debuginfo-4.2.5-42.el7_2.1.i686.rpm	SHA-256: c0d58c3671a4ff3f71106c17d0b67beba57416c80a20da1b6a7fd7005aff8ba7
dhcp-debuginfo-4.2.5-42.el7_2.1.i686.rpm	SHA-256: c0d58c3671a4ff3f71106c17d0b67beba57416c80a20da1b6a7fd7005aff8ba7
dhcp-debuginfo-4.2.5-42.el7_2.1.x86_64.rpm	SHA-256: f0d148e45b9e3ffe35fc4bc358d05af9b7501bd1c5e71ce23cda1808878fe19b
dhcp-debuginfo-4.2.5-42.el7_2.1.x86_64.rpm	SHA-256: f0d148e45b9e3ffe35fc4bc358d05af9b7501bd1c5e71ce23cda1808878fe19b
dhcp-devel-4.2.5-42.el7_2.1.i686.rpm	SHA-256: 47debf0b3656377292855b08e7b66788aa70e08355ba020d59cab86bfb5ee5a2
dhcp-devel-4.2.5-42.el7_2.1.x86_64.rpm	SHA-256: 4c5d2a618820ead38e40c1976662bf4d35e024815eb166bab7b955a126a71b14
dhcp-libs-4.2.5-42.el7_2.1.i686.rpm	SHA-256: 876e2816c88990f492b795926e9efa6da8366f1bf61699562bc3e409a8cb2a4d
dhcp-libs-4.2.5-42.el7_2.1.x86_64.rpm	SHA-256: edbdc01b0c2f3e517e68934fd1bc82f21b6ea137bcfe1424f79e404bb48243db

Red Hat Enterprise Linux Server - Update Services for SAP Solutions 7.2

SRPM
dhcp-4.2.5-42.el7_2.1.src.rpm	SHA-256: a4c9a8b3aefbc63b3c69828535175a23587c51d4516bc52a79de685876b2e2ec
x86_64
dhclient-4.2.5-42.el7_2.1.x86_64.rpm	SHA-256: ad4af53fd7151bccbbf355146a9724e7e5d99fd4944376c72e99248e04afa3b9
dhcp-4.2.5-42.el7_2.1.x86_64.rpm	SHA-256: e528fa33dd2bb08a65f00742fcdc8f1f20f0d71e14ada8d638adde02f5201cdf
dhcp-common-4.2.5-42.el7_2.1.x86_64.rpm	SHA-256: f91cda853643698e642535cafb73dd3e10602ec5f9350cb5e477ea8aebd52585
dhcp-debuginfo-4.2.5-42.el7_2.1.i686.rpm	SHA-256: c0d58c3671a4ff3f71106c17d0b67beba57416c80a20da1b6a7fd7005aff8ba7
dhcp-debuginfo-4.2.5-42.el7_2.1.i686.rpm	SHA-256: c0d58c3671a4ff3f71106c17d0b67beba57416c80a20da1b6a7fd7005aff8ba7
dhcp-debuginfo-4.2.5-42.el7_2.1.x86_64.rpm	SHA-256: f0d148e45b9e3ffe35fc4bc358d05af9b7501bd1c5e71ce23cda1808878fe19b
dhcp-debuginfo-4.2.5-42.el7_2.1.x86_64.rpm	SHA-256: f0d148e45b9e3ffe35fc4bc358d05af9b7501bd1c5e71ce23cda1808878fe19b
dhcp-devel-4.2.5-42.el7_2.1.i686.rpm	SHA-256: 47debf0b3656377292855b08e7b66788aa70e08355ba020d59cab86bfb5ee5a2
dhcp-devel-4.2.5-42.el7_2.1.x86_64.rpm	SHA-256: 4c5d2a618820ead38e40c1976662bf4d35e024815eb166bab7b955a126a71b14
dhcp-libs-4.2.5-42.el7_2.1.i686.rpm	SHA-256: 876e2816c88990f492b795926e9efa6da8366f1bf61699562bc3e409a8cb2a4d
dhcp-libs-4.2.5-42.el7_2.1.x86_64.rpm	SHA-256: edbdc01b0c2f3e517e68934fd1bc82f21b6ea137bcfe1424f79e404bb48243db