A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade dhcp | Aug 22, 2024 | Jan 16, 2019 |
| Amazon Linux Ami 2 | — | Upgrade dhcp-libsUpgrade dhcp-debuginfoUpgrade dhcp-develUpgrade dhclientUpgrade dhcp-commonUpgrade dhcp | Apr 27, 2020 | Jan 16, 2019 |
| Amazon_linux | — | Upgrade dhcp | Mar 2, 2020 | Mar 1, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 16, 2019 |
| Centos_linux | — | Upgrade dhcpUpgrade dhcp-debuginfoUpgrade dhcp-libsUpgrade dhclientUpgrade dhcp-develUpgrade dhcp-common | Jun 19, 2018 | Mar 1, 2018 |
| Debian | — | Upgrade isc-dhcp | Feb 19, 2019 | Jan 16, 2019 |
| Freebsd | — | Upgrade isc-dhcp44-clientUpgrade isc-dhcp43-clientUpgrade isc-dhcp43-serverUpgrade isc-dhcp44-server | Dec 10, 2025 | Mar 2, 2018 |
| Gentoo Linux | — | Upgrade net-misc/dhcp. | Apr 9, 2018 | Apr 8, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade dhclientUpgrade dhcp-libsUpgrade dhcp-commonUpgrade dhcp | May 2, 2018 | Feb 28, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade dhcp-libsUpgrade dhcpUpgrade dhcp-commonUpgrade dhclient | May 2, 2018 | Feb 28, 2018 |
| Oracle Solaris | — | Upgrade service/network/dhcp/isc-dhcp to version 4.3.6.1.0-0.175.3.31.0.4.0 on Solaris 11.3 | Apr 18, 2018 | Apr 18, 2018 |
| Oracle_linux | — | Upgrade dhclientUpgrade dhcp-libsUpgrade dhcpUpgrade dhcp-commonUpgrade dhcp-devel | Mar 2, 2020 | Feb 28, 2018 |
| Redhat_linux | — | No solution existsUpgrade dhcp-libsUpgrade dhcp-develUpgrade dhclientUpgrade dhcp-debuginfoUpgrade dhcp-commonUpgrade dhcp | May 1, 2018 | Mar 1, 2018 |
| Suse | — | Upgrade dhcpUpgrade dhcp-relayUpgrade dhcp-clientUpgrade dhcp-serverUpgrade dhcp-devel | Jun 21, 2018 | Mar 1, 2018 |
| Ubuntu | — | Upgrade isc-dhcp-server-ldapUpgrade isc-dhcp-serverUpgrade isc-dhcp-relayUpgrade isc-dhcp-client | Apr 26, 2018 | Mar 1, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 16, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub