ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade isc-dhcp | Feb 2, 2016 | Jan 13, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 29, 2016 |
| Freebsd | — | Upgrade isc-dhcp42-serverUpgrade isc-dhcp42-relayUpgrade isc-dhcp41-relayUpgrade isc-dhcp42-clientUpgrade isc-dhcp43-serverUpgrade isc-dhcp43-relayUpgrade isc-dhcp41-serverUpgrade isc-dhcp43-clientUpgrade isc-dhcp41-client | Dec 10, 2025 | Jan 12, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade dhclientUpgrade dhcp-commonUpgrade dhcp-libsUpgrade dhcp | May 29, 2018 | Jan 14, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade dhcp-libsUpgrade dhcpUpgrade dhcp-commonUpgrade dhclient | May 29, 2018 | Jan 14, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade dhcpUpgrade dhclientUpgrade dhcp-libsUpgrade dhcp-common | Jun 28, 2018 | Jan 14, 2016 |
| Oracle Solaris | — | Upgrade service/network/dhcp/isc-dhcp to version 4.1.0.7.1-0.175.3.5.0.3.0 on Solaris 11.3 | May 29, 2017 | Jan 14, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 12, 2016 |
| Suse | — | Upgrade dhcp-serverUpgrade dhcp-relayUpgrade dhcpUpgrade dhcp-develUpgrade dhcp-client | Feb 16, 2016 | Jan 14, 2016 |
| Ubuntu | — | Upgrade isc-dhcp-clientUpgrade isc-dhcp-server-ldapUpgrade isc-dhcp-relayUpgrade isc-dhcp-server | Feb 2, 2016 | Jan 13, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub