5.9
Medium
CVE-2018-5733 A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can…
Description
A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ISC DHCP | Versions not published |
References
- kb.isc.org kb.isc.org
- RHSA-2018:0469 access.redhat.com
- DSA-4133 www.debian.org
- USN-3586-2 usn.ubuntu.com
- RHSA-2018:0483 access.redhat.com
- USN-3586-1 usn.ubuntu.com
- 103188 www.securityfocus.com
- 1040437 www.securitytracker.com
- [debian-lts-announce] 20180322 [SECURITY] [DLA 1313-1] isc-dhcp security update lists.debian.org
Timeline
- Published
- Last modified
Other CVEs of ISC DHCP
The 6 CVEs of ISC DHCP →
CVE-2022-2929
In ISC DHCP 1.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1 a system with access to a DHCP server, sending DHCP…
6.5
Medium
CVE-2022-2928
In ISC DHCP 4.4.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called…
6.5
Medium
CVE-2021-25217
In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the…
7.4
High
CVE-2018-5732
Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity…
7.5
High