Input validation error in DHCP - CVE-2021-25217

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU53609

Input validation error in DHCP - CVE-2021-25217

Published: May 27, 2021


Vulnerability identifier: #VU53609
CSH Severity: Medium
CVSS v4: 5.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-25217
CWE-ID: CWE-20
Exploitation vector: Adjecent network
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack or gain access to sensitive information.

The vulnerability exists due to insufficient validation of options data stored in DHCP leases. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack or gain access to sensitive information.

Both dhcpd and dhclient are affected by the vulnerability.


Affected software

DHCP
RUGGEDCOM ROX RX1500
RUGGEDCOM ROX RX5000
RUGGEDCOM ROX RX1512
RUGGEDCOM ROX RX1511
RUGGEDCOM ROX RX1510
RUGGEDCOM ROX RX1501
RUGGEDCOM ROX MX5000
RUGGEDCOM ROX RX1400
RUGGEDCOM ROX RX1536
RUGGEDCOM ROX RX1524
Amazon Linux AMI
Arch Linux
Gentoo Linux
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE CaaS Platform
SUSE Enterprise Storage
Red Hat Enterprise Linux Server - Extended Life Cycle Support
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems)
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
CentOS
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Server
IBM i
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, big endian - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux EUS Compute Node
HPE Helion Openstack
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
SUSE Linux Enterprise Point of Sale
SUSE Linux Enterprise Debuginfo
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
Slackware Linux
Ubuntu
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Server Applications
openEuler
Fedora
cri-o (Red Hat package)
dhcp (Red Hat package)
redhat-release-virtualization-host (Red Hat package)
redhat-virtualization-host (Red Hat package)
openshift-kuryr (Red Hat package)
openshift-clients (Red Hat package)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
isc-dhcp-client (Ubuntu package)
isc-dhcp-server (Ubuntu package)
dhcp-client
dhcp-relay
dhcp-server
dhcp-debuginfo
dhcp-debugsource
dhcp
dhcp-relay-debuginfo
dhcp-server-debuginfo
dhcp-devel
dhcp-client-debuginfo
dhcp-libs
dhcp-common
dhcp-help
cflinuxfs3
Dell EMC PowerProtect Data Protection
IBM Cloud Foundry Migration Runtime
IBM System Storage TS4500 Tape Library
SmartFabric OS10
Red Hat Virtualization Host
Red Hat Virtualization
OpenShift Virtualization
Red Hat OpenShift Container Platform
SINEC INS
Dell EMC Unity Operating Environment (OE)
Dell EMC Unity XT Operating Environment (OE)
Dell EMC Unity VSA Operating Environment (OE)
SecurID Authentication Manager

How to mitigate CVE-2021-25217

Install updates from vendor's website.

DHCP - addressed in versions 4.1-ESV-R16-P1, 4.4.2-P1
RUGGEDCOM ROX RX1500 - update to 2.15.0
RUGGEDCOM ROX RX5000 - update to 2.15.0
RUGGEDCOM ROX RX1512 - update to 2.15.0
RUGGEDCOM ROX RX1511 - update to 2.15.0
RUGGEDCOM ROX RX1510 - update to 2.15.0
RUGGEDCOM ROX RX1501 - update to 2.15.0
RUGGEDCOM ROX MX5000 - update to 2.15.0
cri-o (Red Hat package) - addressed in versions 1.20.3-6.rhaos4.7.git0d0f863.el7, 1.20.3-6.rhaos4.7.git0d0f863.el8
dhcp (Red Hat package) - addressed in versions 4.1.1-64.P1.el6_10, 4.2.5-42.el7_2.2, 4.2.5-47.el7_3.2, 4.2.5-58.el7_4.5, 4.2.5-69.el7_6.1, 4.2.5-77.el7_7.1, 4.2.5-83.el7_9.1, 4.3.6-34.el8_1.2, 4.3.6-40.el8_2.2, 4.3.6-44.el8_4.1
redhat-release-virtualization-host (Red Hat package) - update to 4.3.16-1.el7ev
redhat-virtualization-host (Red Hat package) - update to 4.3.16-20210615.0.el7_9
openshift-kuryr (Red Hat package) - update to 4.7.0-202106232224.p0.git.c7654fb.el8
openshift-clients (Red Hat package) - addressed in versions 4.7.0-202106252127.p0.git.8b4b094.el7, 4.7.0-202106252127.p0.git.8b4b094.el8
cflinuxfs3 - update to 0.241.0
Dell EMC PowerProtect Data Protection - update to 2.7.8
IBM Cloud Foundry Migration Runtime - update to 4.1.2
Red Hat OpenShift Container Platform - update to 4.7.19
isc-dhcp-client (Ubuntu package) - addressed in versions 4.2.4-7ubuntu12.13+esm1, 4.3.3-5ubuntu12.10+esm1, 4.3.5-3ubuntu7.3, 4.4.1-2.1ubuntu5.20.04.2, 4.4.1-2.1ubuntu10.1, 4.4.1-2.2ubuntu6.1
isc-dhcp-server (Ubuntu package) - addressed in versions 4.2.4-7ubuntu12.13+esm1, 4.3.3-5ubuntu12.10+esm1, 4.3.5-3ubuntu7.3, 4.4.1-2.1ubuntu5.20.04.2, 4.4.1-2.1ubuntu10.1, 4.4.1-2.2ubuntu6.1
dhcp-client - addressed in versions 4.2.4.P2-0.28.12.1, 4.3.3-10.22.1, 4.3.6.P1-6.11.1
dhcp-relay - addressed in versions 4.2.4.P2-0.28.12.1, 4.3.3-10.22.1, 4.3.6.P1-6.11.1
dhcp-server - addressed in versions 4.2.4.P2-0.28.12.1, 4.3.3-10.22.1, 4.3.6.P1-6.11.1
dhcp-debuginfo - addressed in versions 4.2.4.P2-0.28.12.1, 4.3.3-10.22.1, 4.3.6.P1-6.11.1
dhcp-debugsource - addressed in versions 4.2.4.P2-0.28.12.1, 4.3.3-10.22.1, 4.3.6.P1-6.11.1
dhcp - addressed in versions 4.2.4.P2-0.28.12.1, 4.3.3-10.22.1, 4.3.6.P1-6.11.1
dhcp-relay-debuginfo - addressed in versions 4.3.3-10.22.1, 4.3.6.P1-6.11.1
dhcp-server-debuginfo - addressed in versions 4.3.3-10.22.1, 4.3.6.P1-6.11.1
dhcp-devel - addressed in versions 4.3.3-10.22.1, 4.3.6.P1-6.11.1
dhcp-client-debuginfo - addressed in versions 4.3.3-10.22.1, 4.3.6.P1-6.11.1
dhcp-client - addressed in versions 4.3.6-40.0.1, 4.3.6-44.0.1
dhcp-libs - addressed in versions 4.3.6-40.0.1, 4.3.6-44.0.1
dhcp-relay - addressed in versions 4.3.6-40.0.1, 4.3.6-44.0.1
dhcp-server - addressed in versions 4.3.6-40.0.1, 4.3.6-44.0.1
dhcp-common - addressed in versions 4.3.6-40.0.1, 4.3.6-44.0.1
dhcp-debugsource - update to 4.4.2-5
dhcp-help - update to 4.4.2-5
dhcp - update to 4.4.2-5
dhcp-devel - update to 4.4.2-5
dhcp-debuginfo - update to 4.4.2-5
dhcp - addressed in versions 4.4.2-9.b1.fc33, 4.4.2-11.b1.fc34
SINEC INS - update to 1.0 SP2
IBM System Storage TS4500 Tape Library - addressed in versions 1.7.0.5, 1.8.0.1
OpenShift Virtualization - addressed in versions 2.6.6, 4.8.0
RUGGEDCOM ROX RX1400 - update to 2.15.0
RUGGEDCOM ROX RX1536 - update to 2.15.0
RUGGEDCOM ROX RX1524 - update to 2.15.0
Dell EMC Unity Operating Environment (OE) - update to 5.1.2.0.5.007
Dell EMC Unity XT Operating Environment (OE) - update to 5.1.2.0.5.007
Dell EMC Unity VSA Operating Environment (OE) - update to 5.1.2.0.5.007
SecurID Authentication Manager - update to 8.5 Patch 5
SmartFabric OS10 - update to 10.5.6.1

External References

Related Security Bulletins