CVE-2009-0692
NoneCVSS
—
EPSS
25.8%
Published
Jul 14, 2009
CISA due date
—
The record
Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:4.0 | dhcp3 | 0 | 3.0.4-13+etch2 |
| Debian:5.0 | dhcp3 | 0 | 3.1.1-6+lenny2 |
| Debian:5.0 | dhcp3 | 0 | 3.1.1-6+lenny3 |
| Red Hat:enterprise_linux:3::as | dhclient | 0 | 7:3.0.1-10.2_EL3 |
| Red Hat:enterprise_linux:3::as | dhcp | 0 | 7:3.0.1-10.2_EL3 |
| Red Hat:enterprise_linux:3::as | dhcp-debuginfo | 0 | 7:3.0.1-10.2_EL3 |
| Red Hat:enterprise_linux:3::as | dhcp-devel | 0 | 7:3.0.1-10.2_EL3 |
| Red Hat:enterprise_linux:3::desktop | dhclient | 0 | 7:3.0.1-10.2_EL3 |
| Red Hat:enterprise_linux:3::desktop | dhcp | 0 | 7:3.0.1-10.2_EL3 |
| Red Hat:enterprise_linux:3::desktop | dhcp-debuginfo | 0 | 7:3.0.1-10.2_EL3 |
| Red Hat:enterprise_linux:3::desktop | dhcp-devel | 0 | 7:3.0.1-10.2_EL3 |
| Red Hat:enterprise_linux:3::es | dhclient | 0 | 7:3.0.1-10.2_EL3 |
| Red Hat:enterprise_linux:3::es | dhcp | 0 | 7:3.0.1-10.2_EL3 |
| Red Hat:enterprise_linux:3::es | dhcp-debuginfo | 0 | 7:3.0.1-10.2_EL3 |
| Red Hat:enterprise_linux:3::es | dhcp-devel | 0 | 7:3.0.1-10.2_EL3 |
| Red Hat:enterprise_linux:3::ws | dhclient | 0 | 7:3.0.1-10.2_EL3 |
| Red Hat:enterprise_linux:3::ws | dhcp | 0 | 7:3.0.1-10.2_EL3 |
| Red Hat:enterprise_linux:3::ws | dhcp-debuginfo | 0 | 7:3.0.1-10.2_EL3 |
| Red Hat:enterprise_linux:3::ws | dhcp-devel | 0 | 7:3.0.1-10.2_EL3 |
| Red Hat:enterprise_linux:4::as | dhclient | 0 | 7:3.0.1-65.el4_8.1 |
| Red Hat:enterprise_linux:4::as | dhcp | 0 | 7:3.0.1-65.el4_8.1 |
| Red Hat:enterprise_linux:4::as | dhcp-debuginfo | 0 | 7:3.0.1-65.el4_8.1 |
| Red Hat:enterprise_linux:4::as | dhcp-devel | 0 | 7:3.0.1-65.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | dhclient | 0 | 7:3.0.1-65.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | dhcp | 0 | 7:3.0.1-65.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | dhcp-debuginfo | 0 | 7:3.0.1-65.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | dhcp-devel | 0 | 7:3.0.1-65.el4_8.1 |
| Red Hat:enterprise_linux:4::es | dhclient | 0 | 7:3.0.1-65.el4_8.1 |
| Red Hat:enterprise_linux:4::es | dhcp | 0 | 7:3.0.1-65.el4_8.1 |
| Red Hat:enterprise_linux:4::es | dhcp-debuginfo | 0 | 7:3.0.1-65.el4_8.1 |
| Red Hat:enterprise_linux:4::es | dhcp-devel | 0 | 7:3.0.1-65.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | dhclient | 0 | 7:3.0.1-65.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | dhcp | 0 | 7:3.0.1-65.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | dhcp-debuginfo | 0 | 7:3.0.1-65.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | dhcp-devel | 0 | 7:3.0.1-65.el4_8.1 |
| Red Hat:rhel_eus:4.7::as | dhclient | 0 | 7:3.0.1-62.el4_7.1 |
| Red Hat:rhel_eus:4.7::as | dhcp | 0 | 7:3.0.1-62.el4_7.1 |
| Red Hat:rhel_eus:4.7::as | dhcp-debuginfo | 0 | 7:3.0.1-62.el4_7.1 |
| Red Hat:rhel_eus:4.7::as | dhcp-devel | 0 | 7:3.0.1-62.el4_7.1 |
| Red Hat:rhel_eus:4.7::es | dhclient | 0 | 7:3.0.1-62.el4_7.1 |
| Red Hat:rhel_eus:4.7::es | dhcp | 0 | 7:3.0.1-62.el4_7.1 |
| Red Hat:rhel_eus:4.7::es | dhcp-debuginfo | 0 | 7:3.0.1-62.el4_7.1 |
| Red Hat:rhel_eus:4.7::es | dhcp-devel | 0 | 7:3.0.1-62.el4_7.1 |
Related vulnerabilities
- CVE-2011-2749 The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV… Also affects dhcp3
- CVE-2011-2748 The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV… Also affects dhcp3
- CVE-2011-0997 dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and… Also affects dhcp3
- CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. CWE-119
- CVE-2026-112073 A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dc… CWE-119
- CVE-2026-90831 A vulnerability was detected in GNU Binutils 2.47. CWE-119
- CVE-2026-90804 A vulnerability was detected in GNU Binutils 2.47. CWE-119
- CVE-2026-90803 A security vulnerability has been detected in GNU Binutils 2.47. CWE-119