ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to cause a denial of service (INSIST assertion failure or request-processing outage) by establishing many sessions.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | debian-upgrade-isc-dhcp | Nov 26, 2019 | Mar 9, 2016 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-dhclienthuawei-euleros-2_0_sp1-upgrade-dhcphuawei-euleros-2_0_sp1-upgrade-dhcp-commonhuawei-euleros-2_0_sp1-upgrade-dhcp-libs | Nov 30, 2017 | Mar 9, 2016 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-service-network-dhcp-isc-dhcp-4-1-0-7-2-0-175-3-10-0-1-0 | May 29, 2017 | Mar 9, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-dhclientoracle-linux-upgrade-dhcporacle-linux-upgrade-dhcp-commonoracle-linux-upgrade-dhcp-develoracle-linux-upgrade-dhcp-libs | Nov 9, 2016 | Mar 9, 2016 |
| Redhat_linux | — | redhat-upgrade-dhclientredhat-upgrade-dhcpredhat-upgrade-dhcp-commonredhat-upgrade-dhcp-debuginforedhat-upgrade-dhcp-develredhat-upgrade-dhcp-libs | Nov 4, 2016 | Mar 9, 2016 |
| Suse | — | suse-upgrade-dhcpsuse-upgrade-dhcp-clientsuse-upgrade-dhcp-develsuse-upgrade-dhcp-relaysuse-upgrade-dhcp-server | Jul 26, 2016 | Mar 9, 2016 |
| Ubuntu | ubuntu-upgrade-isc-dhcp-clientubuntu-upgrade-isc-dhcp-relayubuntu-upgrade-isc-dhcp-serverubuntu-upgrade-isc-dhcp-server-ldap | Mar 2, 2018 | Mar 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub