USN-5658-3

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-5658-3

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5658-3.json

JSON Data

https://api.test.osv.dev/v1/vulns/USN-5658-3

Related

Published

2022-11-21T16:00:28.123785Z

Modified

2022-11-21T16:00:28.123785Z

Summary

isc-dhcp vulnerabilities

Details

USN-5658-1 fixed several vulnerabilities in DHCP. This update provides the corresponding update for Ubuntu 14.04 ESM.

Original advisory details:

It was discovered that DHCP incorrectly handled option reference counting. A remote attacker could possibly use this issue to cause DHCP servers to crash, resulting in a denial of service. (CVE-2022-2928)

It was discovered that DHCP incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause DHCP clients and servers to consume resources, leading to a denial of service. (CVE-2022-2929)

References

Affected packages

Ubuntu:Pro:14.04:LTS / isc-dhcp

Package

Name: isc-dhcp
Purl: pkg:deb/ubuntu/isc-dhcp@4.2.4-7ubuntu12.13+esm2?arch=source&distro=trusty/esm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.2.4-7ubuntu12.13+esm2

Affected versions

4.*

4.2.4-7ubuntu8

4.2.4-7ubuntu9

4.2.4-7ubuntu10

4.2.4-7ubuntu11

4.2.4-7ubuntu12

4.2.4-7ubuntu12.1

4.2.4-7ubuntu12.2

4.2.4-7ubuntu12.3

4.2.4-7ubuntu12.4

4.2.4-7ubuntu12.5

4.2.4-7ubuntu12.6

4.2.4-7ubuntu12.7

4.2.4-7ubuntu12.8

4.2.4-7ubuntu12.9

4.2.4-7ubuntu12.10

4.2.4-7ubuntu12.12

4.2.4-7ubuntu12.13

4.2.4-7ubuntu12.13+esm1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "isc-dhcp-client",
            "binary_version": "4.2.4-7ubuntu12.13+esm2"
        },
        {
            "binary_name": "isc-dhcp-client-dbg",
            "binary_version": "4.2.4-7ubuntu12.13+esm2"
        },
        {
            "binary_name": "isc-dhcp-client-dbgsym",
            "binary_version": "4.2.4-7ubuntu12.13+esm2"
        },
        {
            "binary_name": "isc-dhcp-client-noddns",
            "binary_version": "4.2.4-7ubuntu12.13+esm2"
        },
        {
            "binary_name": "isc-dhcp-client-udeb",
            "binary_version": "4.2.4-7ubuntu12.13+esm2"
        },
        {
            "binary_name": "isc-dhcp-client-udeb-dbgsym",
            "binary_version": "4.2.4-7ubuntu12.13+esm2"
        },
        {
            "binary_name": "isc-dhcp-common",
            "binary_version": "4.2.4-7ubuntu12.13+esm2"
        },
        {
            "binary_name": "isc-dhcp-common-dbgsym",
            "binary_version": "4.2.4-7ubuntu12.13+esm2"
        },
        {
            "binary_name": "isc-dhcp-dev",
            "binary_version": "4.2.4-7ubuntu12.13+esm2"
        },
        {
            "binary_name": "isc-dhcp-relay",
            "binary_version": "4.2.4-7ubuntu12.13+esm2"
        },
        {
            "binary_name": "isc-dhcp-relay-dbg",
            "binary_version": "4.2.4-7ubuntu12.13+esm2"
        },
        {
            "binary_name": "isc-dhcp-relay-dbgsym",
            "binary_version": "4.2.4-7ubuntu12.13+esm2"
        },
        {
            "binary_name": "isc-dhcp-server",
            "binary_version": "4.2.4-7ubuntu12.13+esm2"
        },
        {
            "binary_name": "isc-dhcp-server-dbg",
            "binary_version": "4.2.4-7ubuntu12.13+esm2"
        },
        {
            "binary_name": "isc-dhcp-server-dbgsym",
            "binary_version": "4.2.4-7ubuntu12.13+esm2"
        },
        {
            "binary_name": "isc-dhcp-server-ldap",
            "binary_version": "4.2.4-7ubuntu12.13+esm2"
        },
        {
            "binary_name": "isc-dhcp-server-ldap-dbgsym",
            "binary_version": "4.2.4-7ubuntu12.13+esm2"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}