peter bassill · operator
$ cve CVE-2007-5365 JSON

CVE-2007-5365 EXPLOIT

7.2
HIGH · CVSS 2.0 · EPSS 80.3% (pctl 100)

Patch early

A public exploit exists.

Description

Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a DHCP request specifying a maximum message size smaller than the minimum IP MTU.

Scoring

CVSS7.2 (HIGH, v2.0)
VectorAV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS80.27% — more likely to be exploited than 100% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploityes
Published2007-10-11
Last modified2026-06-16

Affected (7)

VendorProduct
debiandebian linux
openbsdopenbsd
redhatenterprise linux
redhatlinux advanced workstation
sunopensolaris
sunsolaris
ubuntuubuntu linux

Public exploits

SourceTitleDate
exploit-dbUbuntu 6.06 - DHCPd Remote Denial of Service2007-11-02

References

→ the Explorer  ·  watch your stack  ·  NVD