A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/103188 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1040437 | Third Party Advisory VDB Entry |
| https://access.redhat.com/errata/RHSA-2018:0469 | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2018:0483 | Third Party Advisory |
| https://kb.isc.org/docs/aa-01567 | Vendor Advisory |
| https://lists.debian.org/debian-lts-announce/2018/03/msg00015.html | Third Party Advisory |
| https://usn.ubuntu.com/3586-1/ | Third Party Advisory |
| https://usn.ubuntu.com/3586-2/ | Third Party Advisory |
| https://www.debian.org/security/2018/dsa-4133 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
No history.
Information
Published : 2019-01-16 20:29
Updated : 2024-02-28 16:48
NVD link : CVE-2018-5733
Mitre link : CVE-2018-5733
CVE.ORG link : CVE-2018-5733
JSON object : View
Products Affected
redhat
- enterprise_linux_server
- enterprise_linux_server_eus
- enterprise_linux_desktop
- enterprise_linux_server_aus
- enterprise_linux_workstation
canonical
- ubuntu_linux
isc
- dhcp
debian
- debian_linux
CWE
CWE-190
Integer Overflow or Wraparound