Attachment 225496 Details for Bug 256377 – vuxml entry

[patch] vuxml entry

dhcp.patch (text/plain), 1.25 KB, created by rob2g2 on 2021-06-02 12:16:29 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: rob2g2

Created: 2021-06-02 12:16:29 UTC

Size: 1.25 KB

patch

obsolete

>*** vuln.xml.orig	Wed Jun 2 13:50:07 2021
>--- vuln.xml	Wed Jun 2 14:12:47 2021
>***************
>*** 78 ****
>--- 79,113 ----
>+ <vuln vid="e24fb8f8-c39a-11eb-9370-b42e99a1b9c3">
>+ <topic>ISC-dhcp -- remotely exploitable vulnerability</topic>
>+ <affects>
>+ <package>
>+ 	<name>isc-dhcp44-relay</name>
>+ 	<range><lt>4.4.2-P1</lt></range>
>+ </package>
>+ <package>
>+ 	<name>isc-dhcp44-server</name>
>+ 	<range><lt>4.4.2-P1</lt></range>
>+ </package>
>+ <package>
>+ 	<name>isc-dhcp44-client</name>
>+ 	<range><lt>4.4.2-P1</lt></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+ 	Michael McNally reports:
>+ 	<blockquote cite="https://seclists.org/oss-sec/2021/q2/170">
>+ 	 Program code used by the ISC DHCP package to read and parse stored leases
>+ has a defect that can be exploited by an attacker to cause one of several undesirable outcomes
>+ 	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <cvename>CVE-2021-25217</cvename>
>+ <url>https://kb.isc.org/docs/cve-2021-25217</url>
>+ </references>
>+ <dates>
>+ <discovery>2021-05-26</discovery>
>+ <entry>2021-06-02</entry>
>+ </dates>
>+ </vuln>
>+

Actions: View | Diff

Attachments on bug 256377: 225496