File 0005-dhcp4-discard-lease-on-client-id-mismatch-CVE-2020-7.patch of Package wicked.14026
From 1ebab42a37e702b96d2c71f8ca5c4a427b000801 Mon Sep 17 00:00:00 2001
References: CVE-2020-7217,bsc#1160906
Upstream: yes
From: =?UTF-8?q?Rub=C3=A9n=20Torrero=20Marijnissen?=
<rtorreromarijnissen@suse.com>
Date: Fri, 31 Jan 2020 10:55:24 +0000
Subject: [PATCH 2/2] dhcp4: discard lease on client-id mismatch
(CVE-2020-7217,bsc#1160906)
---
src/dhcp4/fsm.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/src/dhcp4/fsm.c b/src/dhcp4/fsm.c
index 89c9148f..dcd19103 100644
--- a/src/dhcp4/fsm.c
+++ b/src/dhcp4/fsm.c
@@ -153,6 +153,7 @@ ni_dhcp4_fsm_process_dhcp4_packet(ni_dhcp4_device_t *dev, ni_buffer_t *msgbuf, n
*/
ni_debug_dhcp("%s: ignoring packet with not matching client-id%s%s",
dev->ifname, sender ? " sender " : "", sender ? sender : "");
+ ni_addrconf_lease_free(lease);
return -1;
}
--
2.16.4