OESA-2022-2009

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-2009
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2022-2009.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2022-2009
Upstream
Published
2022-10-21T11:04:27Z
Modified
2025-08-12T05:13:35.204022Z
Summary
dhcp security update
Details

The Dynamic Host Configuration Protocol (DHCP) is a network management protocol used on UDP/IP networks whereby a DHCP server dynamically assigns an IP address and other network configuration parameters to each device on a network so they can communicate with other IP networks.

Security Fix(es):

In ISC DHCP 4.4.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1, when the function optioncodehashlookup() is called from addoption(), it increases the option's refcount field. However, there is not a corresponding call to optiondereference() to decrement the refcount field. The function addoption() is only used in server responses to lease query packets. Each lease query response calls this function for several options, so eventually, the reference counters could overflow and cause the server to abort.(CVE-2022-2928)

In ISC DHCP 1.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1 a system with access to a DHCP server, sending DHCP packets crafted to include fqdn labels longer than 63 bytes, could eventually cause the server to run out of memory.(CVE-2022-2929)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:20.03-LTS-SP1 / dhcp

Package

Name
dhcp
Purl
pkg:rpm/openEuler/dhcp&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.2-9.oe1

Ecosystem specific 

{
    "noarch": [
        "dhcp-help-4.4.2-9.oe1.noarch.rpm"
    ],
    "src": [
        "dhcp-4.4.2-9.oe1.src.rpm"
    ],
    "aarch64": [
        "dhcp-debugsource-4.4.2-9.oe1.aarch64.rpm",
        "dhcp-debuginfo-4.4.2-9.oe1.aarch64.rpm",
        "dhcp-4.4.2-9.oe1.aarch64.rpm",
        "dhcp-devel-4.4.2-9.oe1.aarch64.rpm"
    ],
    "x86_64": [
        "dhcp-devel-4.4.2-9.oe1.x86_64.rpm",
        "dhcp-4.4.2-9.oe1.x86_64.rpm",
        "dhcp-debugsource-4.4.2-9.oe1.x86_64.rpm",
        "dhcp-debuginfo-4.4.2-9.oe1.x86_64.rpm"
    ]
}

openEuler:20.03-LTS-SP3 / dhcp

Package

Name
dhcp
Purl
pkg:rpm/openEuler/dhcp&distro=openEuler-20.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.2-9.oe1

Ecosystem specific 

{
    "noarch": [
        "dhcp-help-4.4.2-9.oe1.noarch.rpm"
    ],
    "src": [
        "dhcp-4.4.2-9.oe1.src.rpm"
    ],
    "aarch64": [
        "dhcp-devel-4.4.2-9.oe1.aarch64.rpm",
        "dhcp-debugsource-4.4.2-9.oe1.aarch64.rpm",
        "dhcp-4.4.2-9.oe1.aarch64.rpm",
        "dhcp-debuginfo-4.4.2-9.oe1.aarch64.rpm"
    ],
    "x86_64": [
        "dhcp-debuginfo-4.4.2-9.oe1.x86_64.rpm",
        "dhcp-devel-4.4.2-9.oe1.x86_64.rpm",
        "dhcp-debugsource-4.4.2-9.oe1.x86_64.rpm",
        "dhcp-4.4.2-9.oe1.x86_64.rpm"
    ]
}

openEuler:22.03-LTS / dhcp

Package

Name
dhcp
Purl
pkg:rpm/openEuler/dhcp&distro=openEuler-22.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.2-15.oe2203

Ecosystem specific 

{
    "noarch": [
        "dhcp-help-4.4.2-15.oe2203.noarch.rpm"
    ],
    "src": [
        "dhcp-4.4.2-15.oe2203.src.rpm"
    ],
    "aarch64": [
        "dhcp-debuginfo-4.4.2-15.oe2203.aarch64.rpm",
        "dhcp-debugsource-4.4.2-15.oe2203.aarch64.rpm",
        "dhcp-4.4.2-15.oe2203.aarch64.rpm",
        "dhcp-devel-4.4.2-15.oe2203.aarch64.rpm"
    ],
    "x86_64": [
        "dhcp-debugsource-4.4.2-15.oe2203.x86_64.rpm",
        "dhcp-devel-4.4.2-15.oe2203.x86_64.rpm",
        "dhcp-debuginfo-4.4.2-15.oe2203.x86_64.rpm",
        "dhcp-4.4.2-15.oe2203.x86_64.rpm"
    ]
}