Skip to content
OpenAdvisories
High DSA-4133-1 3 CVEs

isc-dhcp - security update

Published Mar 7, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 8 isc-dhcp 4.3.1-6+deb8u3
Debian · 9 isc-dhcp 4.3.5-3+deb9u1

Vulnerabilities 3

  • High 7.5
    CVE-2018-5732

    A specially constructed response from a malicious server can cause a buffer overflow in dhclient

    Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a response containing a specially constructed …

    ISC ISC DHCP isc-dhcp isc-dhcp Debian Ubuntu Alpine
  • Medium 5.9
    CVE-2018-5733 EPSS 20%

    A malicious client can overflow a reference counter in ISC dhcpd

    A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3…

    ISC ISC DHCP isc-dhcp isc-dhcp Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2017-3144 EPSS 73%

    Failure to properly clean up closed OMAPI connections can exhaust available sockets

    A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions ma…

    ISC ISC DHCP isc-dhcp isc-dhcp Debian Ubuntu