Vulnerability in N/a
CVE-2007-5365
Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of ser…
EPSS: 0.803 (99.6th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 27338 (x_refsource_SECUNIA, third-party-advisory)
- 27350 (x_refsource_SECUNIA, third-party-advisory)
- ADV-2008-3088 (vdb-entry, x_refsource_VUPEN)
- 4601 (exploit, x_refsource_EXPLOIT-DB)
- www.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/dhcpd/options.c (x_refsource_CONFIRM)
- bugs.debian.org/cgi-bin/bugreport.cgi (x_refsource_CONFIRM)
- [4.2] 20071008 001: SECURITY FIX: October 8, 2007 (vendor-advisory, x_refsource_OPENBSD)
- 25984 (vdb-entry, x_refsource_BID)
- 20071102 DoS Exploit for DHCPd bug (Bugtraq ID 25984 ; CVE-2007-5365) (mailing-list, x_refsource_BUGTRAQ)
- openbsd-dhcp-bo(37045) (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2007-5365?
- CVE-2007-5365 is a vulnerability in N/a. Published 2007-10-11.
- Is CVE-2007-5365 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.