David Hankins

The issue arises when the DHCP daemon (DHCPD) for ISC DHCP is compiled in environments lacking the vsnprintf function, leading to the use of C include files that define vsnprintf to use the less safe vsprintf function. This can result in buffer overflow vulnerabilities, enabling a denial of service (server crash) and possibly allowing the execution of arbitrary code.

The issue involves multiple stack-based buffer overflows in the error handling routines of the minires library used in the NSUPDATE capability for ISC DHCPD. This allows remote attackers to execute arbitrary code via a DHCP message containing a long hostname. The vulnerability can lead to disruption of confidentiality, integrity, and availability of protected information and can be exploited remotely.