CVE-2021-25217 log

Source
Severity High
Remote Yes
Type Arbitrary code execution
Description
A buffer overrun in the lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient before version 4.4.2-P1.
Group Package Affected Fixed Severity Status Ticket
AVG-2004 dhclient, dhcp 4.4.2-2 4.4.2.P1-1 High Fixed
Date Advisory Group Package Severity Type
01 Jun 2021 ASA-202106-11 AVG-2004 dhcp High arbitrary code execution
01 Jun 2021 ASA-202106-10 AVG-2004 dhclient High arbitrary code execution
References
https://kb.isc.org/docs/cve-2021-25217
https://downloads.isc.org/isc/dhcp/4.4.2-P1/patches/4.4.2.CVE-2021-25217.patch