Back to bug 1315259
| Who | When | What | Removed | Added |
|---|---|---|---|---|
| Adam Mariš | 2016-03-07 11:49:23 UTC | CC | security-response-team | |
| Red Hat Bugzilla | 2016-03-07 11:49:23 UTC | Doc Type | --- | Bug Fix |
| Adam Mariš | 2016-03-07 11:50:55 UTC | Blocks | 1315262 | |
| Adam Mariš | 2016-03-07 11:51:47 UTC | Whiteboard | impact=moderate,public=no,reported=20160304,source=upstream,cvss2=5.4/AV:N/AC:H/Au:N/C:N/I:N/A:C,cwe=CWE-400,rhel-5/dhcp=new,rhel-6/dhcp=new,rhel-7/dhcp=new,fedora-all/dhcp=affected | impact=moderate,public=20160307,reported=20160304,source=upstream,cvss2=5.4/AV:N/AC:H/Au:N/C:N/I:N/A:C,cwe=CWE-400,rhel-5/dhcp=new,rhel-6/dhcp=new,rhel-7/dhcp=new,fedora-all/dhcp=affected |
| Adam Mariš | 2016-03-08 08:51:37 UTC | Summary | EMBARGOED CVE-2016-2774 dhcp: Opening and never closing TCP connections can cause DoS | CVE-2016-2774 dhcp: Opening and never closing TCP connections can cause DoS |
| Adam Mariš | 2016-03-08 08:51:39 UTC | Group | security, qe_staff | |
| Adam Mariš | 2016-03-08 08:52:00 UTC | Depends On | 1315614 | |
| Adam Mariš | 2016-03-08 14:42:19 UTC | Whiteboard | impact=moderate,public=20160307,reported=20160304,source=upstream,cvss2=5.4/AV:N/AC:H/Au:N/C:N/I:N/A:C,cwe=CWE-400,rhel-5/dhcp=new,rhel-6/dhcp=new,rhel-7/dhcp=new,fedora-all/dhcp=affected | impact=moderate,public=20160307,reported=20160304,source=upstream,cvss2=5.4/AV:N/AC:H/Au:N/C:N/I:N/A:P,cwe=CWE-400,rhel-5/dhcp=new,rhel-6/dhcp=new,rhel-7/dhcp=new,fedora-all/dhcp=affected |
| Adam Mariš | 2016-03-08 14:42:50 UTC | Whiteboard | impact=moderate,public=20160307,reported=20160304,source=upstream,cvss2=5.4/AV:N/AC:H/Au:N/C:N/I:N/A:P,cwe=CWE-400,rhel-5/dhcp=new,rhel-6/dhcp=new,rhel-7/dhcp=new,fedora-all/dhcp=affected | impact=moderate,public=20160307,reported=20160304,source=upstream,cvss2=2.6/AV:N/AC:H/Au:N/C:N/I:N/A:P,cwe=CWE-400,rhel-5/dhcp=new,rhel-6/dhcp=new,rhel-7/dhcp=new,fedora-all/dhcp=affected |
| Norman Sardella | 2016-03-10 13:52:22 UTC | CC | sardella | |
| Slawomir Czarko | 2016-03-14 13:02:23 UTC | CC | slawomir | |
| Tomas Hoger | 2016-03-15 14:16:00 UTC | Doc Text | It was discovered that the dhcpd daemon did not restrict the number of open connections to OMAPI and failover ports. A remote attacker able to establish TCP connections to one of these ports could use this flaw to cause dhcpd to exit unexpectedly, stop responding requests, or exhaust system sockets. | |
| Summary | CVE-2016-2774 dhcp: Opening and never closing TCP connections can cause DoS | CVE-2016-2774 dhcp: unclosed TCP connections to OMAPI or failover ports can cause DoS | ||
| Whiteboard | impact=moderate,public=20160307,reported=20160304,source=upstream,cvss2=2.6/AV:N/AC:H/Au:N/C:N/I:N/A:P,cwe=CWE-400,rhel-5/dhcp=new,rhel-6/dhcp=new,rhel-7/dhcp=new,fedora-all/dhcp=affected | impact=moderate,public=20160307,reported=20160304,source=upstream,cvss2=2.6/AV:N/AC:H/Au:N/C:N/I:N/A:P,cwe=CWE-400,rhel-5/dhcp=wontfix,rhel-6/dhcp=defer,rhel-7/dhcp=defer,fedora-all/dhcp=affected | ||
| Salvatore Bonaccorso | 2016-03-15 20:20:47 UTC | CC | carnil | |
| Summer Long | 2016-03-15 22:46:07 UTC | CC | slong | |
| Doc Text | It was discovered that the dhcpd daemon did not restrict the number of open connections to OMAPI and failover ports. A remote attacker able to establish TCP connections to one of these ports could use this flaw to cause dhcpd to exit unexpectedly, stop responding requests, or exhaust system sockets. | A resource-consumption flaw was discovered in the DHCP server. dhcpd did not restrict the number of open connections to OMAPI and failover ports. A remote attacker able to establish TCP connections to one of these ports could use this flaw to cause dhcpd to exit unexpectedly, stop responding requests, or exhaust system sockets (denial of service). | ||
| Tomas Hoger | 2016-04-21 11:40:23 UTC | Depends On | 1329194 | |
| Taylor Frazier | 2016-07-05 15:36:34 UTC | CC | tfrazier | |
| Huzaifa S. Sidhpurwala | 2016-08-23 06:39:26 UTC | Blocks | 1323912 | |
| Tomas Hoger | 2016-10-12 20:03:32 UTC | Whiteboard | impact=moderate,public=20160307,reported=20160304,source=upstream,cvss2=2.6/AV:N/AC:H/Au:N/C:N/I:N/A:P,cwe=CWE-400,rhel-5/dhcp=wontfix,rhel-6/dhcp=defer,rhel-7/dhcp=defer,fedora-all/dhcp=affected | impact=moderate,public=20160307,reported=20160304,source=upstream,cvss2=2.6/AV:N/AC:H/Au:N/C:N/I:N/A:P,cwe=CWE-400,rhel-5/dhcp=wontfix,rhel-6/dhcp=defer,rhel-7/dhcp=affected,fedora-all/dhcp=affected |
| Tomas Hoger | 2019-05-31 10:09:09 UTC | Whiteboard | impact=moderate,public=20160307,reported=20160304,source=upstream,cvss2=2.6/AV:N/AC:H/Au:N/C:N/I:N/A:P,cwe=CWE-400,rhel-5/dhcp=wontfix,rhel-6/dhcp=defer,rhel-7/dhcp=affected,fedora-all/dhcp=affected | impact=moderate,public=20160307,reported=20160304,source=upstream,cvss2=2.6/AV:N/AC:H/Au:N/C:N/I:N/A:P,cwe=CWE-400,rhel-5/dhcp=wontfix,rhel-6/dhcp=wontfix,rhel-7/dhcp=affected,fedora-all/dhcp=affected |
| Product Security DevOps Team | 2019-06-08 02:49:27 UTC | Status | NEW | CLOSED |
| Resolution | --- | ERRATA | ||
| Last Closed | 2019-06-08 02:49:27 UTC | |||
| Product Security DevOps Team | 2019-09-29 13:45:06 UTC | Whiteboard | impact=moderate,public=20160307,reported=20160304,source=upstream,cvss2=2.6/AV:N/AC:H/Au:N/C:N/I:N/A:P,cwe=CWE-400,rhel-5/dhcp=wontfix,rhel-6/dhcp=wontfix,rhel-7/dhcp=affected,fedora-all/dhcp=affected |
Back to bug 1315259