Don’t read this post
Summary: Cisco Talos described CVE-2009-0692, a stack-based buffer overflow in ISC dhclient caused by a memcpy of the large subnet option in a DHCP ACK packet, which allows code execution and affects many Linux and BSD distributions. The write-up notes the flaw is local-network only, that distro patch and auto-update processes lag, and that VRT rules already cover it under GID 3 SID 15700.
What's compelling: An attacker on the same network segment - a hotel, airport, or conference Wi-Fi - can take over every unpatched Linux box that renews a DHCP lease, and the article's own authors expected many systems to stay vulnerable for a long time.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Mentions
- CVE-2009-0692
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026