漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
An option refcount overflow exists in dhcpd
Vulnerability Description
In ISC DHCP 4.4.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called from add_option(), it increases the option's refcount field. However, there is not a corresponding call to option_dereference() to decrement the refcount field. The function add_option() is only used in server responses to lease query packets. Each lease query response calls this function for several options, so eventually, the reference counters could overflow and cause the server to abort.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
N/A
Vulnerability Title
ISC DHCP 代码问题漏洞
Vulnerability Description
ISC DHCP是美国ISC公司的一套开源的动态主机配置协议服务器软件。 ISC DHCP 4.4.0至4.4.3版本、4.1-ESV-R1至4.1-ESV-R16-P1版本存在安全漏洞,该漏洞源于当从add_option()调用函数option_code_hash_lookup()时,它会增加选项的refcount字段,但是没有对option_dereference()的相应调用来减少refcount字段,函数add_option()仅用于服务器对租约查询数据包的响应,每个租约查询响应都会为多个选项调用
CVSS Information
N/A
Vulnerability Type
N/A