svn commit: r413540 - head/security/vuxml

Sun Apr 17 20:07:37 UTC 2016

Author: junovitch
Date: Sun Apr 17 20:07:36 2016
New Revision: 413540
URL: https://svnweb.freebsd.org/changeset/ports/413540

Log:
  Document earlier dhcpcd security issue that has been fixed in an earlier
  version before the security implications were reported.
  
  PR:		208840
  Submitted by:	Ben Woods <woodsb02 at gmail.com>
  Submitted by:	Roy Marples <roy at marples.name>
  Security:	CVE-2014-7912
  Security:	https://vuxml.FreeBSD.org/freebsd/092156c9-04d7-11e6-b1ce-002590263bf5.html

Modified:
  head/security/vuxml/vuln.xml

Modified: head/security/vuxml/vuln.xml
==============================================================================

--- head/security/vuxml/vuln.xml	Sun Apr 17 19:20:56 2016	(r413539)
+++ head/security/vuxml/vuln.xml	Sun Apr 17 20:07:36 2016	(r413540)
@@ -58,6 +58,37 @@ Notes:
   * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
 -->
 <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+  <vuln vid="092156c9-04d7-11e6-b1ce-002590263bf5">
+    <topic>dhcpcd -- remote code execution/denial of service</topic>
+    <affects>
+      <package>
+	<name>dhcpcd</name>
+	<range><lt>6.9.1</lt></range>
+      </package>
+    </affects>
+    <description>
+      <body xmlns="http://www.w3.org/1999/xhtml">
+	<p>MITRE reports:</p>
+	<blockquote cite="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7912">
+	  <p>The get_option function in dhcp.c in dhcpcd before 6.2.0, as used
+	    in dhcpcd 5.x in Android before 5.1 and other products, does not
+	    validate the relationship between length fields and the amount of
+	    data, which allows remote DHCP servers to execute arbitrary code or
+	    cause a denial of service (memory corruption) via a large length
+	    value of an option in a DHCPACK message.</p>
+	</blockquote>
+      </body>
+    </description>
+    <references>
+      <cvename>CVE-2014-7912</cvename>
+      <url>http://roy.marples.name/projects/dhcpcd/info/d71cfd8aa203bffe</url>
+    </references>
+    <dates>
+      <discovery>2015-06-19</discovery>
+      <entry>2016-04-17</entry>
+    </dates>
+  </vuln>
+
   <vuln vid="6ec9f210-0404-11e6-9aee-bc5ff4fb5ea1">
     <topic>dhcpcd -- remote code execution/denial of service</topic>
     <affects>
