Rapid7 Vulnerability & Exploit Database

RHSA-2002:165: pxe security update

Back to Search

RHSA-2002:165: pxe security update

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
10/04/2002
Created
07/25/2018
Added
10/28/2005
Modified
07/12/2017

Description

Updated PXE packages are now available for Red Hat Linux Advanced Server which fix a vulnerability that can crash the PXE server using certain DHCP packets.

The PXE package contains the PXE (Preboot eXecution Environment) server and code needed for Linux to boot from a boot disk image on a Linux PXE server. It was found that the PXE server could be crashed using DHCP packets from some Voice Over IP (VOIP) phones. This bug could be used to cause a denial of service (DoS) attack on remote systems by using malicious packets. Users of PXE on Red Hat Linux Advanced Server are advised to upgrade to the new release which contains a version of PXE that is not vulnerable to this issue.

Solution(s)

  • redhat-upgrade-pxe

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;