ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade isc-dhcp | Feb 2, 2016 | Jan 13, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 29, 2016 |
| Freebsd | — | Upgrade isc-dhcp41-clientUpgrade isc-dhcp43-serverUpgrade isc-dhcp42-clientUpgrade isc-dhcp43-clientUpgrade isc-dhcp41-serverUpgrade isc-dhcp41-relayUpgrade isc-dhcp43-relayUpgrade isc-dhcp42-relayUpgrade isc-dhcp42-server | Dec 10, 2025 | Jan 12, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade dhclientUpgrade dhcpUpgrade dhcp-commonUpgrade dhcp-libs | May 29, 2018 | Jan 14, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade dhclientUpgrade dhcp-libsUpgrade dhcp-commonUpgrade dhcp | May 29, 2018 | Jan 14, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade dhcp-libsUpgrade dhcp-commonUpgrade dhclientUpgrade dhcp | Jun 28, 2018 | Jan 14, 2016 |
| Oracle Solaris | — | Upgrade service/network/dhcp/isc-dhcp to version 4.1.0.7.1-0.175.3.5.0.3.0 on Solaris 11.3 | May 29, 2017 | Jan 14, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 12, 2016 |
| Suse | — | Upgrade dhcp-clientUpgrade dhcp-serverUpgrade dhcp-develUpgrade dhcpUpgrade dhcp-relay | Feb 16, 2016 | Jan 14, 2016 |
| Ubuntu | — | Upgrade isc-dhcp-clientUpgrade isc-dhcp-relayUpgrade isc-dhcp-serverUpgrade isc-dhcp-server-ldap | Feb 2, 2016 | Jan 13, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub