Skip to content
OpenAdvisories
High USN-4969-2 1 CVE

isc-dhcp vulnerability

Published May 27, 2021 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

USN-4969-1 fixed a vulnerability in DHCP. This update provides
the corresponding update for Ubuntu 14.04 ESM and 16.04 ESM.

Original advisory details:

Jon Franklin and Pawel Wieczorkiewicz discovered that DHCP incorrectly
handled lease file parsing. A remote attacker could possibly use this issue
to cause DHCP to crash, resulting in a denial of service.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS isc-dhcp 4.2.4-7ubuntu12.13+esm1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS isc-dhcp 4.3.3-5ubuntu12.10+esm1

Vulnerabilities 1

  • High 7.4
    CVE-2021-25217

    A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient

    In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series) are beyond their End-of-Life (EOL) and no longer supported by ISC. From inspection it is …

    ISC ISC DHCP isc-dhcp isc-dhcp Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2021-25217