Scientific Linux Security Update : dhcp on SL7.x x86_64

High Nessus Plugin ID 95836


The remote Scientific Linux host is missing one or more security updates.


Security Fix(es) :

- A resource-consumption flaw was discovered in the DHCP server. dhcpd did not restrict the number of open connections to OMAPI and failover ports. A remote attacker able to establish TCP connections to one of these ports could use this flaw to cause dhcpd to exit unexpectedly, stop responding requests, or exhaust system sockets (denial of service). (CVE-2016-2774)

Additional Changes :


Update the affected packages.

See Also

Plugin Details

Severity: High

ID: 95836

File Name: sl_20161103_dhcp_on_SL7_x.nasl

Version: $Revision: 3.3 $

Type: local

Agent: unix

Published: 2016/12/15

Modified: 2018/01/18

Dependencies: 12634

Risk Information

Risk Factor: High


Base Score: 7.1

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C


Base Score: 5.9

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Vulnerability Information

CPE: x-cpe:/o:fermilab:scientific_linux

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 2016/11/03

Reference Information

CVE: CVE-2016-2774