Actions
Bug #8873
open
GL
GL
dhcp: parser ignores the declared length of time options
Bug #8873:
dhcp: parser ignores the declared length of time options
Affected Versions:
Effort:
Difficulty:
Label:
Description
DHCP options 51, 58, and 59 contain four-byte time values, but the parser ignores their length byte and always consumes four bytes.
Malformed options with lengths other than four can therefore desynchronize option parsing and produce false matches for dhcp.leasetime, dhcp.renewal_time, or dhcp.rebinding_time.
The parser should reject these options unless their declared length is exactly four.
GL Updated by Giuseppe Longo 4 days ago
- Subject changed from dhcp parser ignores the declared length of time options to dhcp: parser ignores the declared length of time options
Actions