Skip to content
OpenAdvisories
Medium USN-3973-1 1 CVE

isc-dhcp vulnerability

Published May 13, 2019 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that DHCP, when built with a mismatched external BIND
library, incorrectly handled certain memory operations. A remote attacker
could possibly use this issue to cause DHCP to crash, resulting in a
denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS isc-dhcp 4.3.5-3ubuntu7.1

Vulnerabilities 1

  • Medium 6.5
    CVE-2019-6470

    dhcpd: use-after-free error leads crash in IPv6 mode when using mismatched BIND libraries

    There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevente…

    Multiple, non-ISC dhcpd bind isc-dhcp Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2019-6470