{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for dhcp is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network.\n\nSecurity Fix(es):\n\n* dhcp: double-deletion of the released addresses in the dhcpv6 code leading to crash and possible DoS (CVE-2019-6470)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2019:3525", "url": "https://access.redhat.com/errata/RHSA-2019:3525" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/", "url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/" }, { "category": "external", "summary": "1660865", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1660865" }, { "category": "external", "summary": "1685560", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1685560" }, { "category": "external", "summary": "1708641", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1708641" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3525.json" } ], "title": "Red Hat Security Advisory: dhcp security and bug fix update", "tracking": { "current_release_date": "2025-11-21T18:10:57+00:00", "generator": { "date": "2025-11-21T18:10:57+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.12" } }, "id": "RHSA-2019:3525", "initial_release_date": "2019-11-05T21:00:32+00:00", "revision_history": [ { "date": "2019-11-05T21:00:32+00:00", "number": "1", "summary": "Initial version" }, { "date": "2019-11-05T21:00:32+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-11-21T18:10:57+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux BaseOS (v. 8)", "product": { "name": "Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8::baseos" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "dhcp-server-12:4.3.6-34.el8.aarch64", "product": { "name": "dhcp-server-12:4.3.6-34.el8.aarch64", "product_id": "dhcp-server-12:4.3.6-34.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-server@4.3.6-34.el8?arch=aarch64&epoch=12" } } }, { "category": "product_version", "name": "dhcp-relay-12:4.3.6-34.el8.aarch64", "product": { "name": "dhcp-relay-12:4.3.6-34.el8.aarch64", "product_id": "dhcp-relay-12:4.3.6-34.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-relay@4.3.6-34.el8?arch=aarch64&epoch=12" } } }, { "category": "product_version", "name": "dhcp-libs-debuginfo-12:4.3.6-34.el8.aarch64", "product": { "name": "dhcp-libs-debuginfo-12:4.3.6-34.el8.aarch64", "product_id": "dhcp-libs-debuginfo-12:4.3.6-34.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-libs-debuginfo@4.3.6-34.el8?arch=aarch64&epoch=12" } } }, { "category": "product_version", "name": "dhcp-debugsource-12:4.3.6-34.el8.aarch64", "product": { "name": "dhcp-debugsource-12:4.3.6-34.el8.aarch64", "product_id": "dhcp-debugsource-12:4.3.6-34.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-debugsource@4.3.6-34.el8?arch=aarch64&epoch=12" } } }, { "category": "product_version", "name": "dhcp-debuginfo-12:4.3.6-34.el8.aarch64", "product": { "name": "dhcp-debuginfo-12:4.3.6-34.el8.aarch64", "product_id": "dhcp-debuginfo-12:4.3.6-34.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-debuginfo@4.3.6-34.el8?arch=aarch64&epoch=12" } } }, { "category": "product_version", "name": "dhcp-server-debuginfo-12:4.3.6-34.el8.aarch64", "product": { "name": "dhcp-server-debuginfo-12:4.3.6-34.el8.aarch64", "product_id": "dhcp-server-debuginfo-12:4.3.6-34.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-server-debuginfo@4.3.6-34.el8?arch=aarch64&epoch=12" } } }, { "category": "product_version", "name": "dhcp-libs-12:4.3.6-34.el8.aarch64", "product": { "name": "dhcp-libs-12:4.3.6-34.el8.aarch64", "product_id": "dhcp-libs-12:4.3.6-34.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-libs@4.3.6-34.el8?arch=aarch64&epoch=12" } } }, { "category": "product_version", "name": "dhcp-client-debuginfo-12:4.3.6-34.el8.aarch64", "product": { "name": "dhcp-client-debuginfo-12:4.3.6-34.el8.aarch64", "product_id": "dhcp-client-debuginfo-12:4.3.6-34.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-client-debuginfo@4.3.6-34.el8?arch=aarch64&epoch=12" } } }, { "category": "product_version", "name": "dhcp-relay-debuginfo-12:4.3.6-34.el8.aarch64", "product": { "name": "dhcp-relay-debuginfo-12:4.3.6-34.el8.aarch64", "product_id": "dhcp-relay-debuginfo-12:4.3.6-34.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-relay-debuginfo@4.3.6-34.el8?arch=aarch64&epoch=12" } } }, { "category": "product_version", "name": "dhcp-client-12:4.3.6-34.el8.aarch64", "product": { "name": "dhcp-client-12:4.3.6-34.el8.aarch64", "product_id": "dhcp-client-12:4.3.6-34.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-client@4.3.6-34.el8?arch=aarch64&epoch=12" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "dhcp-server-12:4.3.6-34.el8.x86_64", "product": { "name": "dhcp-server-12:4.3.6-34.el8.x86_64", "product_id": "dhcp-server-12:4.3.6-34.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-server@4.3.6-34.el8?arch=x86_64&epoch=12" } } }, { "category": "product_version", "name": "dhcp-relay-12:4.3.6-34.el8.x86_64", "product": { "name": "dhcp-relay-12:4.3.6-34.el8.x86_64", "product_id": "dhcp-relay-12:4.3.6-34.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-relay@4.3.6-34.el8?arch=x86_64&epoch=12" } } }, { "category": "product_version", "name": "dhcp-libs-debuginfo-12:4.3.6-34.el8.x86_64", "product": { "name": "dhcp-libs-debuginfo-12:4.3.6-34.el8.x86_64", "product_id": "dhcp-libs-debuginfo-12:4.3.6-34.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-libs-debuginfo@4.3.6-34.el8?arch=x86_64&epoch=12" } } }, { "category": "product_version", "name": "dhcp-debugsource-12:4.3.6-34.el8.x86_64", "product": { "name": "dhcp-debugsource-12:4.3.6-34.el8.x86_64", "product_id": "dhcp-debugsource-12:4.3.6-34.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-debugsource@4.3.6-34.el8?arch=x86_64&epoch=12" } } }, { "category": "product_version", "name": "dhcp-debuginfo-12:4.3.6-34.el8.x86_64", "product": { "name": "dhcp-debuginfo-12:4.3.6-34.el8.x86_64", "product_id": "dhcp-debuginfo-12:4.3.6-34.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-debuginfo@4.3.6-34.el8?arch=x86_64&epoch=12" } } }, { "category": "product_version", "name": "dhcp-server-debuginfo-12:4.3.6-34.el8.x86_64", "product": { "name": "dhcp-server-debuginfo-12:4.3.6-34.el8.x86_64", "product_id": "dhcp-server-debuginfo-12:4.3.6-34.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-server-debuginfo@4.3.6-34.el8?arch=x86_64&epoch=12" } } }, { "category": "product_version", "name": "dhcp-libs-12:4.3.6-34.el8.x86_64", "product": { "name": "dhcp-libs-12:4.3.6-34.el8.x86_64", "product_id": "dhcp-libs-12:4.3.6-34.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-libs@4.3.6-34.el8?arch=x86_64&epoch=12" } } }, { "category": "product_version", "name": "dhcp-client-debuginfo-12:4.3.6-34.el8.x86_64", "product": { "name": "dhcp-client-debuginfo-12:4.3.6-34.el8.x86_64", "product_id": "dhcp-client-debuginfo-12:4.3.6-34.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-client-debuginfo@4.3.6-34.el8?arch=x86_64&epoch=12" } } }, { "category": "product_version", "name": "dhcp-relay-debuginfo-12:4.3.6-34.el8.x86_64", "product": { "name": "dhcp-relay-debuginfo-12:4.3.6-34.el8.x86_64", "product_id": "dhcp-relay-debuginfo-12:4.3.6-34.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-relay-debuginfo@4.3.6-34.el8?arch=x86_64&epoch=12" } } }, { "category": "product_version", "name": "dhcp-client-12:4.3.6-34.el8.x86_64", "product": { "name": "dhcp-client-12:4.3.6-34.el8.x86_64", "product_id": "dhcp-client-12:4.3.6-34.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-client@4.3.6-34.el8?arch=x86_64&epoch=12" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "dhcp-libs-debuginfo-12:4.3.6-34.el8.i686", "product": { "name": "dhcp-libs-debuginfo-12:4.3.6-34.el8.i686", "product_id": "dhcp-libs-debuginfo-12:4.3.6-34.el8.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-libs-debuginfo@4.3.6-34.el8?arch=i686&epoch=12" } } }, { "category": "product_version", "name": "dhcp-debugsource-12:4.3.6-34.el8.i686", "product": { "name": "dhcp-debugsource-12:4.3.6-34.el8.i686", "product_id": "dhcp-debugsource-12:4.3.6-34.el8.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-debugsource@4.3.6-34.el8?arch=i686&epoch=12" } } }, { "category": "product_version", "name": "dhcp-debuginfo-12:4.3.6-34.el8.i686", "product": { "name": "dhcp-debuginfo-12:4.3.6-34.el8.i686", "product_id": "dhcp-debuginfo-12:4.3.6-34.el8.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-debuginfo@4.3.6-34.el8?arch=i686&epoch=12" } } }, { "category": "product_version", "name": "dhcp-server-debuginfo-12:4.3.6-34.el8.i686", "product": { "name": "dhcp-server-debuginfo-12:4.3.6-34.el8.i686", "product_id": "dhcp-server-debuginfo-12:4.3.6-34.el8.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-server-debuginfo@4.3.6-34.el8?arch=i686&epoch=12" } } }, { "category": "product_version", "name": "dhcp-libs-12:4.3.6-34.el8.i686", "product": { "name": "dhcp-libs-12:4.3.6-34.el8.i686", "product_id": "dhcp-libs-12:4.3.6-34.el8.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-libs@4.3.6-34.el8?arch=i686&epoch=12" } } }, { "category": "product_version", "name": "dhcp-client-debuginfo-12:4.3.6-34.el8.i686", "product": { "name": "dhcp-client-debuginfo-12:4.3.6-34.el8.i686", "product_id": "dhcp-client-debuginfo-12:4.3.6-34.el8.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-client-debuginfo@4.3.6-34.el8?arch=i686&epoch=12" } } }, { "category": "product_version", "name": "dhcp-relay-debuginfo-12:4.3.6-34.el8.i686", "product": { "name": "dhcp-relay-debuginfo-12:4.3.6-34.el8.i686", "product_id": "dhcp-relay-debuginfo-12:4.3.6-34.el8.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-relay-debuginfo@4.3.6-34.el8?arch=i686&epoch=12" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "dhcp-server-12:4.3.6-34.el8.s390x", "product": { "name": "dhcp-server-12:4.3.6-34.el8.s390x", "product_id": "dhcp-server-12:4.3.6-34.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-server@4.3.6-34.el8?arch=s390x&epoch=12" } } }, { "category": "product_version", "name": "dhcp-relay-12:4.3.6-34.el8.s390x", "product": { "name": "dhcp-relay-12:4.3.6-34.el8.s390x", "product_id": "dhcp-relay-12:4.3.6-34.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-relay@4.3.6-34.el8?arch=s390x&epoch=12" } } }, { "category": "product_version", "name": "dhcp-libs-debuginfo-12:4.3.6-34.el8.s390x", "product": { "name": "dhcp-libs-debuginfo-12:4.3.6-34.el8.s390x", "product_id": "dhcp-libs-debuginfo-12:4.3.6-34.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-libs-debuginfo@4.3.6-34.el8?arch=s390x&epoch=12" } } }, { "category": "product_version", "name": "dhcp-debugsource-12:4.3.6-34.el8.s390x", "product": { "name": "dhcp-debugsource-12:4.3.6-34.el8.s390x", "product_id": "dhcp-debugsource-12:4.3.6-34.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-debugsource@4.3.6-34.el8?arch=s390x&epoch=12" } } }, { "category": "product_version", "name": "dhcp-debuginfo-12:4.3.6-34.el8.s390x", "product": { "name": "dhcp-debuginfo-12:4.3.6-34.el8.s390x", "product_id": "dhcp-debuginfo-12:4.3.6-34.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-debuginfo@4.3.6-34.el8?arch=s390x&epoch=12" } } }, { "category": "product_version", "name": "dhcp-server-debuginfo-12:4.3.6-34.el8.s390x", "product": { "name": "dhcp-server-debuginfo-12:4.3.6-34.el8.s390x", "product_id": "dhcp-server-debuginfo-12:4.3.6-34.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-server-debuginfo@4.3.6-34.el8?arch=s390x&epoch=12" } } }, { "category": "product_version", "name": "dhcp-libs-12:4.3.6-34.el8.s390x", "product": { "name": "dhcp-libs-12:4.3.6-34.el8.s390x", "product_id": "dhcp-libs-12:4.3.6-34.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-libs@4.3.6-34.el8?arch=s390x&epoch=12" } } }, { "category": "product_version", "name": "dhcp-client-debuginfo-12:4.3.6-34.el8.s390x", "product": { "name": "dhcp-client-debuginfo-12:4.3.6-34.el8.s390x", "product_id": "dhcp-client-debuginfo-12:4.3.6-34.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-client-debuginfo@4.3.6-34.el8?arch=s390x&epoch=12" } } }, { "category": "product_version", "name": "dhcp-relay-debuginfo-12:4.3.6-34.el8.s390x", "product": { "name": "dhcp-relay-debuginfo-12:4.3.6-34.el8.s390x", "product_id": "dhcp-relay-debuginfo-12:4.3.6-34.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-relay-debuginfo@4.3.6-34.el8?arch=s390x&epoch=12" } } }, { "category": "product_version", "name": "dhcp-client-12:4.3.6-34.el8.s390x", "product": { "name": "dhcp-client-12:4.3.6-34.el8.s390x", "product_id": "dhcp-client-12:4.3.6-34.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-client@4.3.6-34.el8?arch=s390x&epoch=12" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "dhcp-server-12:4.3.6-34.el8.ppc64le", "product": { "name": "dhcp-server-12:4.3.6-34.el8.ppc64le", "product_id": "dhcp-server-12:4.3.6-34.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-server@4.3.6-34.el8?arch=ppc64le&epoch=12" } } }, { "category": "product_version", "name": "dhcp-relay-12:4.3.6-34.el8.ppc64le", "product": { "name": "dhcp-relay-12:4.3.6-34.el8.ppc64le", "product_id": "dhcp-relay-12:4.3.6-34.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-relay@4.3.6-34.el8?arch=ppc64le&epoch=12" } } }, { "category": "product_version", "name": "dhcp-libs-debuginfo-12:4.3.6-34.el8.ppc64le", "product": { "name": "dhcp-libs-debuginfo-12:4.3.6-34.el8.ppc64le", "product_id": "dhcp-libs-debuginfo-12:4.3.6-34.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-libs-debuginfo@4.3.6-34.el8?arch=ppc64le&epoch=12" } } }, { "category": "product_version", "name": "dhcp-debugsource-12:4.3.6-34.el8.ppc64le", "product": { "name": "dhcp-debugsource-12:4.3.6-34.el8.ppc64le", "product_id": "dhcp-debugsource-12:4.3.6-34.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-debugsource@4.3.6-34.el8?arch=ppc64le&epoch=12" } } }, { "category": "product_version", "name": "dhcp-debuginfo-12:4.3.6-34.el8.ppc64le", "product": { "name": "dhcp-debuginfo-12:4.3.6-34.el8.ppc64le", "product_id": "dhcp-debuginfo-12:4.3.6-34.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-debuginfo@4.3.6-34.el8?arch=ppc64le&epoch=12" } } }, { "category": "product_version", "name": "dhcp-server-debuginfo-12:4.3.6-34.el8.ppc64le", "product": { "name": "dhcp-server-debuginfo-12:4.3.6-34.el8.ppc64le", "product_id": "dhcp-server-debuginfo-12:4.3.6-34.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-server-debuginfo@4.3.6-34.el8?arch=ppc64le&epoch=12" } } }, { "category": "product_version", "name": "dhcp-libs-12:4.3.6-34.el8.ppc64le", "product": { "name": "dhcp-libs-12:4.3.6-34.el8.ppc64le", "product_id": "dhcp-libs-12:4.3.6-34.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-libs@4.3.6-34.el8?arch=ppc64le&epoch=12" } } }, { "category": "product_version", "name": "dhcp-client-debuginfo-12:4.3.6-34.el8.ppc64le", "product": { "name": "dhcp-client-debuginfo-12:4.3.6-34.el8.ppc64le", "product_id": "dhcp-client-debuginfo-12:4.3.6-34.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-client-debuginfo@4.3.6-34.el8?arch=ppc64le&epoch=12" } } }, { "category": "product_version", "name": "dhcp-relay-debuginfo-12:4.3.6-34.el8.ppc64le", "product": { "name": "dhcp-relay-debuginfo-12:4.3.6-34.el8.ppc64le", "product_id": "dhcp-relay-debuginfo-12:4.3.6-34.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-relay-debuginfo@4.3.6-34.el8?arch=ppc64le&epoch=12" } } }, { "category": "product_version", "name": "dhcp-client-12:4.3.6-34.el8.ppc64le", "product": { "name": "dhcp-client-12:4.3.6-34.el8.ppc64le", "product_id": "dhcp-client-12:4.3.6-34.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-client@4.3.6-34.el8?arch=ppc64le&epoch=12" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "dhcp-common-12:4.3.6-34.el8.noarch", "product": { "name": "dhcp-common-12:4.3.6-34.el8.noarch", "product_id": "dhcp-common-12:4.3.6-34.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp-common@4.3.6-34.el8?arch=noarch&epoch=12" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "dhcp-12:4.3.6-34.el8.src", "product": { "name": "dhcp-12:4.3.6-34.el8.src", "product_id": "dhcp-12:4.3.6-34.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/dhcp@4.3.6-34.el8?arch=src&epoch=12" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "dhcp-12:4.3.6-34.el8.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-12:4.3.6-34.el8.src" }, "product_reference": "dhcp-12:4.3.6-34.el8.src", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-client-12:4.3.6-34.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-client-12:4.3.6-34.el8.aarch64" }, "product_reference": "dhcp-client-12:4.3.6-34.el8.aarch64", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-client-12:4.3.6-34.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-client-12:4.3.6-34.el8.ppc64le" }, "product_reference": "dhcp-client-12:4.3.6-34.el8.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-client-12:4.3.6-34.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-client-12:4.3.6-34.el8.s390x" }, "product_reference": "dhcp-client-12:4.3.6-34.el8.s390x", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-client-12:4.3.6-34.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-client-12:4.3.6-34.el8.x86_64" }, "product_reference": "dhcp-client-12:4.3.6-34.el8.x86_64", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-client-debuginfo-12:4.3.6-34.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-client-debuginfo-12:4.3.6-34.el8.aarch64" }, "product_reference": "dhcp-client-debuginfo-12:4.3.6-34.el8.aarch64", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-client-debuginfo-12:4.3.6-34.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-client-debuginfo-12:4.3.6-34.el8.i686" }, "product_reference": "dhcp-client-debuginfo-12:4.3.6-34.el8.i686", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-client-debuginfo-12:4.3.6-34.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-client-debuginfo-12:4.3.6-34.el8.ppc64le" }, "product_reference": "dhcp-client-debuginfo-12:4.3.6-34.el8.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-client-debuginfo-12:4.3.6-34.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-client-debuginfo-12:4.3.6-34.el8.s390x" }, "product_reference": "dhcp-client-debuginfo-12:4.3.6-34.el8.s390x", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-client-debuginfo-12:4.3.6-34.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-client-debuginfo-12:4.3.6-34.el8.x86_64" }, "product_reference": "dhcp-client-debuginfo-12:4.3.6-34.el8.x86_64", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-common-12:4.3.6-34.el8.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-common-12:4.3.6-34.el8.noarch" }, "product_reference": "dhcp-common-12:4.3.6-34.el8.noarch", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-debuginfo-12:4.3.6-34.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-debuginfo-12:4.3.6-34.el8.aarch64" }, "product_reference": "dhcp-debuginfo-12:4.3.6-34.el8.aarch64", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-debuginfo-12:4.3.6-34.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-debuginfo-12:4.3.6-34.el8.i686" }, "product_reference": "dhcp-debuginfo-12:4.3.6-34.el8.i686", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-debuginfo-12:4.3.6-34.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-debuginfo-12:4.3.6-34.el8.ppc64le" }, "product_reference": "dhcp-debuginfo-12:4.3.6-34.el8.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-debuginfo-12:4.3.6-34.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-debuginfo-12:4.3.6-34.el8.s390x" }, "product_reference": "dhcp-debuginfo-12:4.3.6-34.el8.s390x", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-debuginfo-12:4.3.6-34.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-debuginfo-12:4.3.6-34.el8.x86_64" }, "product_reference": "dhcp-debuginfo-12:4.3.6-34.el8.x86_64", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-debugsource-12:4.3.6-34.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-debugsource-12:4.3.6-34.el8.aarch64" }, "product_reference": "dhcp-debugsource-12:4.3.6-34.el8.aarch64", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-debugsource-12:4.3.6-34.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-debugsource-12:4.3.6-34.el8.i686" }, "product_reference": "dhcp-debugsource-12:4.3.6-34.el8.i686", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-debugsource-12:4.3.6-34.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-debugsource-12:4.3.6-34.el8.ppc64le" }, "product_reference": "dhcp-debugsource-12:4.3.6-34.el8.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-debugsource-12:4.3.6-34.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-debugsource-12:4.3.6-34.el8.s390x" }, "product_reference": "dhcp-debugsource-12:4.3.6-34.el8.s390x", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-debugsource-12:4.3.6-34.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-debugsource-12:4.3.6-34.el8.x86_64" }, "product_reference": "dhcp-debugsource-12:4.3.6-34.el8.x86_64", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-libs-12:4.3.6-34.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-libs-12:4.3.6-34.el8.aarch64" }, "product_reference": "dhcp-libs-12:4.3.6-34.el8.aarch64", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-libs-12:4.3.6-34.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-libs-12:4.3.6-34.el8.i686" }, "product_reference": "dhcp-libs-12:4.3.6-34.el8.i686", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-libs-12:4.3.6-34.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-libs-12:4.3.6-34.el8.ppc64le" }, "product_reference": "dhcp-libs-12:4.3.6-34.el8.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-libs-12:4.3.6-34.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-libs-12:4.3.6-34.el8.s390x" }, "product_reference": "dhcp-libs-12:4.3.6-34.el8.s390x", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-libs-12:4.3.6-34.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-libs-12:4.3.6-34.el8.x86_64" }, "product_reference": "dhcp-libs-12:4.3.6-34.el8.x86_64", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-libs-debuginfo-12:4.3.6-34.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-libs-debuginfo-12:4.3.6-34.el8.aarch64" }, "product_reference": "dhcp-libs-debuginfo-12:4.3.6-34.el8.aarch64", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-libs-debuginfo-12:4.3.6-34.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-libs-debuginfo-12:4.3.6-34.el8.i686" }, "product_reference": "dhcp-libs-debuginfo-12:4.3.6-34.el8.i686", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-libs-debuginfo-12:4.3.6-34.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-libs-debuginfo-12:4.3.6-34.el8.ppc64le" }, "product_reference": "dhcp-libs-debuginfo-12:4.3.6-34.el8.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-libs-debuginfo-12:4.3.6-34.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-libs-debuginfo-12:4.3.6-34.el8.s390x" }, "product_reference": "dhcp-libs-debuginfo-12:4.3.6-34.el8.s390x", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-libs-debuginfo-12:4.3.6-34.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-libs-debuginfo-12:4.3.6-34.el8.x86_64" }, "product_reference": "dhcp-libs-debuginfo-12:4.3.6-34.el8.x86_64", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-relay-12:4.3.6-34.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-relay-12:4.3.6-34.el8.aarch64" }, "product_reference": "dhcp-relay-12:4.3.6-34.el8.aarch64", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-relay-12:4.3.6-34.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-relay-12:4.3.6-34.el8.ppc64le" }, "product_reference": "dhcp-relay-12:4.3.6-34.el8.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-relay-12:4.3.6-34.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-relay-12:4.3.6-34.el8.s390x" }, "product_reference": "dhcp-relay-12:4.3.6-34.el8.s390x", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-relay-12:4.3.6-34.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-relay-12:4.3.6-34.el8.x86_64" }, "product_reference": "dhcp-relay-12:4.3.6-34.el8.x86_64", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-relay-debuginfo-12:4.3.6-34.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-relay-debuginfo-12:4.3.6-34.el8.aarch64" }, "product_reference": "dhcp-relay-debuginfo-12:4.3.6-34.el8.aarch64", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-relay-debuginfo-12:4.3.6-34.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-relay-debuginfo-12:4.3.6-34.el8.i686" }, "product_reference": "dhcp-relay-debuginfo-12:4.3.6-34.el8.i686", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-relay-debuginfo-12:4.3.6-34.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-relay-debuginfo-12:4.3.6-34.el8.ppc64le" }, "product_reference": "dhcp-relay-debuginfo-12:4.3.6-34.el8.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-relay-debuginfo-12:4.3.6-34.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-relay-debuginfo-12:4.3.6-34.el8.s390x" }, "product_reference": "dhcp-relay-debuginfo-12:4.3.6-34.el8.s390x", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-relay-debuginfo-12:4.3.6-34.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-relay-debuginfo-12:4.3.6-34.el8.x86_64" }, "product_reference": "dhcp-relay-debuginfo-12:4.3.6-34.el8.x86_64", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-server-12:4.3.6-34.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-server-12:4.3.6-34.el8.aarch64" }, "product_reference": "dhcp-server-12:4.3.6-34.el8.aarch64", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-server-12:4.3.6-34.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-server-12:4.3.6-34.el8.ppc64le" }, "product_reference": "dhcp-server-12:4.3.6-34.el8.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-server-12:4.3.6-34.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-server-12:4.3.6-34.el8.s390x" }, "product_reference": "dhcp-server-12:4.3.6-34.el8.s390x", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-server-12:4.3.6-34.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-server-12:4.3.6-34.el8.x86_64" }, "product_reference": "dhcp-server-12:4.3.6-34.el8.x86_64", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-server-debuginfo-12:4.3.6-34.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-server-debuginfo-12:4.3.6-34.el8.aarch64" }, "product_reference": "dhcp-server-debuginfo-12:4.3.6-34.el8.aarch64", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-server-debuginfo-12:4.3.6-34.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-server-debuginfo-12:4.3.6-34.el8.i686" }, "product_reference": "dhcp-server-debuginfo-12:4.3.6-34.el8.i686", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-server-debuginfo-12:4.3.6-34.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-server-debuginfo-12:4.3.6-34.el8.ppc64le" }, "product_reference": "dhcp-server-debuginfo-12:4.3.6-34.el8.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-server-debuginfo-12:4.3.6-34.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-server-debuginfo-12:4.3.6-34.el8.s390x" }, "product_reference": "dhcp-server-debuginfo-12:4.3.6-34.el8.s390x", "relates_to_product_reference": "BaseOS-8.1.0" }, { "category": "default_component_of", "full_product_name": { "name": "dhcp-server-debuginfo-12:4.3.6-34.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.1.0:dhcp-server-debuginfo-12:4.3.6-34.el8.x86_64" }, "product_reference": "dhcp-server-debuginfo-12:4.3.6-34.el8.x86_64", "relates_to_product_reference": "BaseOS-8.1.0" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-6470", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2019-05-03T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1708641" } ], "notes": [ { "category": "description", "text": "There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version lists for all repackagings of dhcpd that are vulnerable. In particular, builds from other vendors may also be affected. Operators are advised to consult their vendor documentation.", "title": "Vulnerability description" }, { "category": "summary", "text": "dhcp: double-deletion of the released addresses in the dhcpv6 code leading to crash and possible DoS", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "BaseOS-8.1.0:dhcp-12:4.3.6-34.el8.src", "BaseOS-8.1.0:dhcp-client-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-client-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-client-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-client-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-client-debuginfo-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-client-debuginfo-12:4.3.6-34.el8.i686", "BaseOS-8.1.0:dhcp-client-debuginfo-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-client-debuginfo-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-client-debuginfo-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-common-12:4.3.6-34.el8.noarch", "BaseOS-8.1.0:dhcp-debuginfo-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-debuginfo-12:4.3.6-34.el8.i686", "BaseOS-8.1.0:dhcp-debuginfo-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-debuginfo-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-debuginfo-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-debugsource-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-debugsource-12:4.3.6-34.el8.i686", "BaseOS-8.1.0:dhcp-debugsource-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-debugsource-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-debugsource-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-libs-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-libs-12:4.3.6-34.el8.i686", "BaseOS-8.1.0:dhcp-libs-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-libs-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-libs-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-libs-debuginfo-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-libs-debuginfo-12:4.3.6-34.el8.i686", "BaseOS-8.1.0:dhcp-libs-debuginfo-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-libs-debuginfo-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-libs-debuginfo-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-relay-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-relay-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-relay-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-relay-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-relay-debuginfo-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-relay-debuginfo-12:4.3.6-34.el8.i686", "BaseOS-8.1.0:dhcp-relay-debuginfo-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-relay-debuginfo-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-relay-debuginfo-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-server-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-server-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-server-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-server-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-server-debuginfo-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-server-debuginfo-12:4.3.6-34.el8.i686", "BaseOS-8.1.0:dhcp-server-debuginfo-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-server-debuginfo-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-server-debuginfo-12:4.3.6-34.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-6470" }, { "category": "external", "summary": "RHBZ#1708641", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1708641" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-6470", "url": "https://www.cve.org/CVERecord?id=CVE-2019-6470" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-6470", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-6470" }, { "category": "external", "summary": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=896122", "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=896122" } ], "release_date": "2018-07-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-05T21:00:32+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "BaseOS-8.1.0:dhcp-12:4.3.6-34.el8.src", "BaseOS-8.1.0:dhcp-client-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-client-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-client-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-client-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-client-debuginfo-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-client-debuginfo-12:4.3.6-34.el8.i686", "BaseOS-8.1.0:dhcp-client-debuginfo-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-client-debuginfo-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-client-debuginfo-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-common-12:4.3.6-34.el8.noarch", "BaseOS-8.1.0:dhcp-debuginfo-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-debuginfo-12:4.3.6-34.el8.i686", "BaseOS-8.1.0:dhcp-debuginfo-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-debuginfo-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-debuginfo-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-debugsource-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-debugsource-12:4.3.6-34.el8.i686", "BaseOS-8.1.0:dhcp-debugsource-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-debugsource-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-debugsource-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-libs-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-libs-12:4.3.6-34.el8.i686", "BaseOS-8.1.0:dhcp-libs-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-libs-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-libs-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-libs-debuginfo-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-libs-debuginfo-12:4.3.6-34.el8.i686", "BaseOS-8.1.0:dhcp-libs-debuginfo-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-libs-debuginfo-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-libs-debuginfo-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-relay-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-relay-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-relay-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-relay-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-relay-debuginfo-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-relay-debuginfo-12:4.3.6-34.el8.i686", "BaseOS-8.1.0:dhcp-relay-debuginfo-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-relay-debuginfo-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-relay-debuginfo-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-server-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-server-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-server-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-server-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-server-debuginfo-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-server-debuginfo-12:4.3.6-34.el8.i686", "BaseOS-8.1.0:dhcp-server-debuginfo-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-server-debuginfo-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-server-debuginfo-12:4.3.6-34.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3525" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "BaseOS-8.1.0:dhcp-12:4.3.6-34.el8.src", "BaseOS-8.1.0:dhcp-client-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-client-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-client-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-client-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-client-debuginfo-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-client-debuginfo-12:4.3.6-34.el8.i686", "BaseOS-8.1.0:dhcp-client-debuginfo-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-client-debuginfo-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-client-debuginfo-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-common-12:4.3.6-34.el8.noarch", "BaseOS-8.1.0:dhcp-debuginfo-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-debuginfo-12:4.3.6-34.el8.i686", "BaseOS-8.1.0:dhcp-debuginfo-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-debuginfo-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-debuginfo-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-debugsource-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-debugsource-12:4.3.6-34.el8.i686", "BaseOS-8.1.0:dhcp-debugsource-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-debugsource-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-debugsource-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-libs-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-libs-12:4.3.6-34.el8.i686", "BaseOS-8.1.0:dhcp-libs-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-libs-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-libs-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-libs-debuginfo-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-libs-debuginfo-12:4.3.6-34.el8.i686", "BaseOS-8.1.0:dhcp-libs-debuginfo-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-libs-debuginfo-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-libs-debuginfo-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-relay-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-relay-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-relay-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-relay-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-relay-debuginfo-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-relay-debuginfo-12:4.3.6-34.el8.i686", "BaseOS-8.1.0:dhcp-relay-debuginfo-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-relay-debuginfo-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-relay-debuginfo-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-server-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-server-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-server-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-server-12:4.3.6-34.el8.x86_64", "BaseOS-8.1.0:dhcp-server-debuginfo-12:4.3.6-34.el8.aarch64", "BaseOS-8.1.0:dhcp-server-debuginfo-12:4.3.6-34.el8.i686", "BaseOS-8.1.0:dhcp-server-debuginfo-12:4.3.6-34.el8.ppc64le", "BaseOS-8.1.0:dhcp-server-debuginfo-12:4.3.6-34.el8.s390x", "BaseOS-8.1.0:dhcp-server-debuginfo-12:4.3.6-34.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "dhcp: double-deletion of the released addresses in the dhcpv6 code leading to crash and possible DoS" } ] }