USN-1309-1: DHCP vulnerability

Releases

• Ubuntu 11.10
• Ubuntu 11.04

Packages

• isc-dhcp - DHCP server and client

Details

It was discovered that the DHCP server incorrectly handled certain
malformed packets when configured to evaluate regular expressions. A remote
attacker could use this issue to cause DHCP to crash, resulting in a denial
of service.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 11.10

• isc-dhcp-server - 4.1.1-P1-17ubuntu10.1

Ubuntu 11.04

• isc-dhcp-server - 4.1.1-P1-15ubuntu9.3

In general, a standard system update will make all the necessary changes.

References

• CVE-2011-4539