ISC ISC DHCP
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-2929 | 1.0 through versions before 4.1-ESV-R16-P2 ; 4.2 through versions before 4.4.3.-P1 | DHCP memory leak | MEDIUM 6.5 | 0.7 % | ||
| CVE-2022-2928 | 4.4.0 through versions before 4.4.3-P1 ; 4.1 ESV 4.1-ESV-R1 through versions before 4.1-ESV-R16-P1 | An option refcount overflow exists in dhcpd | MEDIUM 6.5 | 0.7 % | ||
| CVE-2021-25217 | 4.1 ESV – < 4.1-ESV-R16-P1 ; 4.4 – < 4.4.2-P1 | A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient | HIGH 7.4 | 6.1 % | ||
| CVE-2018-5732 | ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0 | A specially constructed response from a malicious server can cause a buffer overflow in dhclient | HIGH 7.5 | 5.2 % | ||
| CVE-2018-5733 | ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0 | A malicious client can overflow a reference counter in ISC dhcpd | HIGH 7.5 | 20 % | ||
| CVE-2017-3144 | ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested. | Failure to properly clean up closed OMAPI connections can exhaust available sockets | HIGH 7.5 | 73 % |