Skip to content
OpenAdvisories

Package · Debian

isc-dhcp

25 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.9
    CVE-2026-18103

    Dhcp-server: dhcp-server: persistent denial of service due to buffer overflow via omapi

    A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI (Open Management Application Programming Interface) port, especially if not secured with TSIG (Transaction Signature) key authentication, could send a specially crafted lease …

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  • Medium 6.5
    CVE-2022-2929

    DHCP memory leak

    In ISC DHCP 1.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1 a system with access to a DHCP server, sending DHCP packets crafted to include fqdn labels longer than 63 bytes, could eventually cause the server to run out of memory.

    ISC ISC DHCP isc-dhcp isc-dhcp Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2022-2928

    An option refcount overflow exists in dhcpd

    In ISC DHCP 4.4.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called from add_option(), it increases the option's refcount field. However, there is not a corresponding call to option_dereference() to decreme…

    ISC ISC DHCP isc-dhcp isc-dhcp Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2019-6470

    dhcpd: use-after-free error leads crash in IPv6 mode when using mismatched BIND libraries

    There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevente…

    Multiple, non-ISC dhcpd isc-dhcp isc-dhcp Debian Ubuntu Alpine
  • Medium 5.9
    CVE-2018-5733 EPSS 20%

    A malicious client can overflow a reference counter in ISC dhcpd

    A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3…

    ISC ISC DHCP isc-dhcp isc-dhcp Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2017-3144 EPSS 73%

    Failure to properly clean up closed OMAPI connections can exhaust available sockets

    A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions ma…

    ISC ISC DHCP isc-dhcp isc-dhcp Debian Ubuntu