CVE catalog
CVE-2009-0692
dhcp3 - arbitrary code execution
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 25.78% · Oct 25, 2026
Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option. dhclient: stack overflow leads to arbitrary code execution as root This issue affected the dhcp packages as shipped with Red Hat Enterprise Linux 3 and 4. This issue did not affect the dhcp packages as shipped with Red Hat Enterprise Linux 5 due to the use of FORTIFY_SOURCE protection mechanism that changes the exploitability of the issue into a controlled application termination. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | dhcp3 | 4.0 | 3.0.4-13 | vulnerable |
| Debian | dhcp3 | 4.0 | 3.0.4-13+etch2 | fixed |
| Debian | dhcp3 | 5.0 | 3.1.1-6 | vulnerable |
| Debian | dhcp3 | 5.0 | 3.1.1-6+lenny2 | fixed |
| Debian | dhcp3 | 5.0 | 3.1.1-6 | vulnerable |
| Debian | dhcp3 | 5.0 | 3.1.1-6+lenny2 | vulnerable |
| Debian | dhcp3 | 5.0 | 3.1.1-6+lenny3 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | dhcp3 | deb | 4.0 | 3.0.4-13+etch2 | Not reported | DSA-1833-1 | Not reported |
| Debian | dhcp3 | deb | 5.0 | 3.1.1-6+lenny2 | Not reported | DSA-1833-1 | Not reported |
| Debian | dhcp3 | deb | 5.0 | 3.1.1-6+lenny3 | Not reported | DSA-1833-2 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: