Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, or (5) NAK messages, which can generate a long string when writing to a log file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ISC DHCP处理日志行缓冲区溢出漏洞
Vulnerability Description
ISC DHCPD是美国ISC（Internet Systems Consortium）公司的一套动态主机配置协议服务器软件。 ISC DHCPD应用程序存在一个缓冲区溢出问题，远程攻击者可以利用这个漏洞对守护进程进行拒绝服务攻击，或以进程权限在系统上执行任意指令。 ISC DHCPD使用syslog记录每个传输的DHCP包，客户端的DISCOVER和结果OFFER，REQUEST及ACK，任何NAK全部会记录下来。在这些信息中，如果客户端提供了主机名也会被记录到日志行中。如果客户端提供多个主机名选项，这
CVSS Information
N/A
Vulnerability Type
N/A