Skip to content
OpenAdvisories
High RHSA-2018:0469 2 CVEs

Red Hat Security Advisory: dhcp security update

Published Sep 16, 2024 · Updated Jul 1, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client dhclient 12:4.1.1-53.P1.el6_9.3
Red Hat · RHEL 6 enterprise_linux:6::client dhcp 12:4.1.1-53.P1.el6_9.3
Red Hat · RHEL 6 enterprise_linux:6::client dhcp-common 12:4.1.1-53.P1.el6_9.3
Red Hat · RHEL 6 enterprise_linux:6::client dhcp-debuginfo 12:4.1.1-53.P1.el6_9.3
Red Hat · RHEL 6 enterprise_linux:6::client dhcp-devel 12:4.1.1-53.P1.el6_9.3
Red Hat · RHEL 6 enterprise_linux:6::computenode dhclient 12:4.1.1-53.P1.el6_9.3
Red Hat · RHEL 6 enterprise_linux:6::computenode dhcp 12:4.1.1-53.P1.el6_9.3
Red Hat · RHEL 6 enterprise_linux:6::computenode dhcp-common 12:4.1.1-53.P1.el6_9.3
Red Hat · RHEL 6 enterprise_linux:6::computenode dhcp-debuginfo 12:4.1.1-53.P1.el6_9.3
Red Hat · RHEL 6 enterprise_linux:6::computenode dhcp-devel 12:4.1.1-53.P1.el6_9.3
Red Hat · RHEL 6 enterprise_linux:6::server dhclient 12:4.1.1-53.P1.el6_9.3
Red Hat · RHEL 6 enterprise_linux:6::server dhcp 12:4.1.1-53.P1.el6_9.3
Red Hat · RHEL 6 enterprise_linux:6::server dhcp-common 12:4.1.1-53.P1.el6_9.3
Red Hat · RHEL 6 enterprise_linux:6::server dhcp-debuginfo 12:4.1.1-53.P1.el6_9.3
Red Hat · RHEL 6 enterprise_linux:6::server dhcp-devel 12:4.1.1-53.P1.el6_9.3
Red Hat · RHEL 6 enterprise_linux:6::workstation dhclient 12:4.1.1-53.P1.el6_9.3
Red Hat · RHEL 6 enterprise_linux:6::workstation dhcp 12:4.1.1-53.P1.el6_9.3
Red Hat · RHEL 6 enterprise_linux:6::workstation dhcp-common 12:4.1.1-53.P1.el6_9.3
Red Hat · RHEL 6 enterprise_linux:6::workstation dhcp-debuginfo 12:4.1.1-53.P1.el6_9.3
Red Hat · RHEL 6 enterprise_linux:6::workstation dhcp-devel 12:4.1.1-53.P1.el6_9.3

Vulnerabilities 2

  • High 7.5
    CVE-2018-5732

    A specially constructed response from a malicious server can cause a buffer overflow in dhclient

    Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a response containing a specially constructed …

    ISC ISC DHCP isc-dhcp isc-dhcp Debian Ubuntu Alpine
  • Medium 5.9
    CVE-2018-5733 EPSS 20%

    A malicious client can overflow a reference counter in ISC dhcpd

    A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3…

    ISC ISC DHCP isc-dhcp isc-dhcp Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://kb.isc.org/article/AA-01565
  • article
    https://kb.isc.org/article/AA-01567
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1549960
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1549961
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0469.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-5732
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-5732
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-5732
  • report
    https://access.redhat.com/security/cve/CVE-2018-5733
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-5733
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-5733