Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ISC DHCP C包含文件vsnprintf()缓冲区溢出漏洞
Vulnerability Description
ISC DHCPD是美国ISC(Internet Systems Consortium)公司的一套动态主机配置协议服务器软件。 ISC DHCPD应用程序使用的vsnprintf()存在一个缓冲区溢出问题,远程攻击者可以利用这个漏洞对守护进程进行拒绝服务攻击,或以进程权限在系统上执行任意指令。 ISC DHCP调用vsnprintf()来写格式日志文件字符串,如系统不知道vsnprintf(),就会建立C include文件,并定义如下: #define vsnprintf(buf, size, fmt,
CVSS Information
N/A
Vulnerability Type
N/A