ArchLinux: 201803-3: dhclient: denial of service
Summary
An out-of-bound memory access flaw was found in the way dhclient processed a DHCP response packet. A malicious DHCP server could potentially use this flaw to crash dhclient processes running on DHCP client machines via a crafted DHCP response packet.
Resolution
Upgrade to 4.4.1-1.
# pacman -Syu "dhclient>=4.4.1-1"
The problem has been fixed upstream in version 4.4.1.
References
https://kb.isc.org/docs/aa-01565 https://lists.isc.org/pipermail/dhcp-announce/2018-February/000418.html ;a=commitdiff;h=c5931725b48b121d232df4ba9e45bc41e0ba114d https://bugs.isc.org/Public/Bug/Display.html?id=47139 https://security.archlinux.org/CVE-2018-5732
Workaround
None.