Re: [Dnsmasq-discuss] Validation for malformed DHCP packets in dnsmasq

2019-01-20 Thread P, Sreelakshmi
malformed packets are crashing dnsmasq and some daemon-framework is restarting it, that's bad, and we'd like to know about it. Cheers Simon. On 10/12/2018 05:59, P, Sreelakshmi wrote: > Hi All, > >   > > Does anyone has any update on this? > >   > > Thank

[Dnsmasq-discuss] Validation for malformed DHCP packets in dnsmasq

2018-12-07 Thread P, Sreelakshmi
Hi, We are using dnsmasq 2.78. We see that there are some security vulnerability w.r.t malformed DHCP packets as explained below. Problem 1: A malformed dhcp discover packet can cause dhcp to be unresponsive from the switch for a small amount of time. If this was repeated over time an

Re: [Dnsmasq-discuss] Validation for malformed DHCP packets in dnsmasq

2018-12-09 Thread P, Sreelakshmi
Hi All, Does anyone has any update on this? Thanks! From: P, Sreelakshmi Sent: Friday, December 7, 2018 4:19 PM To: 'dnsmasq-discuss@lists.thekelleys.org.uk' Subject: Validation for malformed DHCP packets in dnsmasq Hi, We are using dnsmasq 2.78. We see that there are some security

[Dnsmasq-discuss] DHCP DOS caused by malformed dhcp discover packet

2018-12-10 Thread P, Sreelakshmi
Hi All, A malformed dhcp discover packet can cause dnsmasq to be unresponsive for a small amount of time. If this was repeated over time an attacker could make the dhcp service unresponsive DOSing the box. Does dnsmasq validate the incoming DHCP packet? We are using v2.78. Are there any

[Dnsmasq-discuss] "No IPv6 address available" for bulk request from IXIA DHCPv6 clients

2019-02-07 Thread P, Sreelakshmi
Hi All, I'm trying to simulate DHCPv6 clients from IXIA and observe that only 1 or 2 clients gets honored with IPv6 address when simultaneous requests are sent from 64 clients, but the same thing works if the request is made one after the other sequentially. Configuration below: