Package: pump
Version: 0.8.24-7.1
Severity: minor

Pump can copy bytes from a memory area beyond struct bootpRequest when
the length field of the last DHCP option is greater than the number of
remaining bytes in bootpRequest. This does not seem to have security
implications because this area contains nothing potentially interesting
to the remote attacker, but it is technically undefined behavior
according to the C language standard, so additional checks should be
added.

Reply via email to