Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2007-5365 Details
Description
Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a DHCP request specifying a maximum message size smaller than the minimum IP MTU.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| debian debian linux | 3.1 4.0 |
CPE
Remediation
| |
| openbsd openbsd | 4.0 4.1 4.2 |
CPE
Remediation
| |
| redhat enterprise linux | 2.1 |
CPE
Remediation
| |
| redhat linux advanced workstation | 2.1 |
CPE
Remediation
| |
| sun opensolaris | snv_01 snv_02 snv_03 snv_04 snv_05 snv_06 snv_07 snv_08 snv_09 snv_10 snv_11 snv_12 snv_13 snv_14 snv_15 snv_16 snv_17 snv_18 snv_19 snv_20 snv_21 snv_22 snv_23 snv_24 snv_25 snv_26 snv_27 snv_28 snv_29 snv_30 snv_31 snv_32 snv_33 snv_34 snv_35 snv_36 snv_37 snv_38 snv_39 snv_40 snv_41 snv_42 snv_43 snv_44 snv_45 snv_46 snv_47 snv_48 snv_49 snv_50 snv_51 snv_52 snv_53 snv_54 snv_55 snv_56 snv_57 snv_58 snv_59 snv_60 snv_61 snv_62 snv_63 snv_64 snv_65 snv_66 snv_67 snv_68 snv_69 snv_70 snv_71 snv_72 snv_73 snv_74 snv_75 snv_76 snv_77 snv_78 snv_79 snv_80 snv_81 snv_82 snv_83 snv_84 snv_85 snv_86 snv_87 snv_88 snv_89 snv_90 snv_91 snv_92 snv_93 snv_94 snv_95 snv_96 snv_97 snv_98 snv_99 snv_100 snv_101 snv_102 |
CPE
Remediation
| |
| sun solaris | 8.0 9.0 10.0 |
CPE
Remediation
| |
| ubuntu ubuntu linux | 6.06 _nil_ 6.10 7.04 7.10 |
CPE
Remediation
| |
Change History
8 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 16, 2026 | CVE Modified | [email protected] |
| Apr 23, 2026 | Status Change | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Oct 15, 2018 | CVE Modified | [email protected] |
| Oct 11, 2017 | CVE Modified | [email protected] |
| Jul 29, 2017 | CVE Modified | [email protected] |
| Oct 11, 2007 | Initial Analysis | [email protected] |