DH
Product
Dhcp
25
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 4Low 0
Watch
Add Dhcp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-5732 | 7.5 | Oct 9 | Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and… Affected: 4.1.0 through 4.1.2; 4.2.0 before 4.2.8; 4.3.0 before 4.3.6; 4.1-esv; 4.1-esv; 4.1-esv; +32 more |
| CVE-2017-3144 | 7.5 | Jan 16 | Failure to properly clean up closed OMAPI connections can exhaust available sockets Affected: 4.2.0 through 4.2.8; 4.3.0 through 4.3.6; 4.1-esv; 4.1-esv; 4.1-esv; 4.1-esv; +30 more |
| CVE-2018-5733 | 7.5 | Jan 16 | A malicious client can overflow a reference counter in ISC dhcpd Affected: 4.2.0 through 4.2.8; 4.3.0 through 4.3.6; 4.1-esv; 4.1-esv; 4.1-esv; 4.1-esv; +32 more |
| CVE-2021-25217 | 7.4 | May 26 | In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series) are… Affected: 4.4.0 through 4.4.2; 4.1-esv; 4.1-esv; 4.1-esv; 4.1-esv; 4.1-esv; +23 more |
| CVE-2022-2929 | 6.5 | Oct 7 | DHCP memory leak Affected: 1.0.0 before 4.1-esv; 4.2.0 through 4.4.3; 4.1-esv; 4.1-esv; 4.1-esv; 4.1-esv; +25 more |
| CVE-2022-2928 | 6.5 | Oct 7 | An option refcount overflow exists in dhcpd Affected: 4.4.0 through 4.4.3; 4.1-esv; 4.1-esv; 4.1-esv; 4.1-esv; 4.1-esv; +24 more |
| CVE-2015-8605 | 6.5 | Jan 14 | ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.2; 4.0.3; 4.0.3; +34 more |
| CVE-2016-2774 | 5.9 | Mar 9 | ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to cause a denial of… Affected: 4.1-esv; 4.1-esv; 4.1-esv; 4.1-esv; 4.1-esv; 4.1-esv; +34 more |
| CVE-2013-2494 | – | Mar 28 | libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a denial of service (memory consumption) via vectors involving a regular expression, as demonstrated… Affected: 4.2.0; 4.2.0; 4.2.0; 4.2.0; 4.2.0; 4.2.0; +13 more |
| CVE-2012-3955 | – | Sep 14 | ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an… Affected: 4.1-esv; 4.1-esv; 4.1-esv; 4.1-esv; 4.1-esv; 4.1-esv; +19 more |
| CVE-2012-3954 | – | Jul 25 | Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of service (memory consumption) by sending… Affected: 4.1.0; 4.1.0; 4.1.0; 4.1.0; 4.1.1; 4.1.1; +34 more |
| CVE-2012-3571 | – | Jul 25 | ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed client… Affected: 4.1.2; 4.2.0; 4.2.0; 4.2.0; 4.2.0; 4.2.0; +22 more |
| CVE-2012-3570 | – | Jul 25 | Buffer overflow in ISC DHCP 4.2.x before 4.2.4-P1, when DHCPv6 mode is enabled, allows remote attackers to cause a denial of service (segmentation fault and daemon exit) via a… Affected: 4.2.0; 4.2.0; 4.2.0; 4.2.0; 4.2.0; 4.2.0; +11 more |
| CVE-2011-4868 | – | Jan 15 | The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS (DDNS) and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure,… Affected: through 4.2.3; 3.0; 3.0; 3.0; 3.0; 3.0; +34 more |
| CVE-2011-4539 | – | Dec 8 | dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of… Affected: 4.0; 4.0.0; 4.0.1; 4.0.1; 4.0.1; 4.0.2; +29 more |
| CVE-2011-2749 | – | Aug 15 | The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a… Affected: 3.0; 3.0.1; 3.0.1; 3.0.1; 3.0.1; 3.0.1; +34 more |
| CVE-2011-2748 | – | Aug 15 | The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a… Affected: 3.0; 3.0.1; 3.0.1; 3.0.1; 3.0.1; 3.0.1; +34 more |
| CVE-2011-0997 | – | Apr 8 | dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell… Affected: 3.0; 3.0.1; 3.0.1; 3.0.1; 3.0.1; 3.0.1; +34 more |
| CVE-2011-0413 | – | Jan 31 | The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attackers to cause a denial of service… Affected: 4.0; 4.0.0; 4.0.1; 4.0.1; 4.0.1; 4.0.2; +23 more |
| CVE-2010-3616 | – | Dec 17 | ISC DHCP server 4.2 before 4.2.0-P2, when configured to use failover partnerships, allows remote attackers to cause a denial of service (communications-interrupted state and DHCP… Affected: 4.2.0; 4.2.0 |
| CVE-2010-3611 | – | Nov 4 | ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a DHCPv6… Affected: 4.0; 4.0.0; 4.0.1; 4.0.1; 4.0.1; 4.1.0; +11 more |
| CVE-2010-2156 | – | Jun 7 | ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID Affected: 4.1.0; 4.1.1; 4.1.1; 4.1.1; 4.1.1; 4.1.1; +9 more |
| CVE-2009-1893 | – | Jul 17 | The configtest function in the Red Hat dhcpd init script for DHCP 3.0.1 in Red Hat Enterprise Linux (RHEL) 3 allows local users to overwrite arbitrary files via a symlink attack… Affected: 3.0.1; 3.0.1; 3.0.1; 3.0.1; 3.0.1; 3.0.1; +6 more |
| CVE-2009-1892 | – | Jul 17 | dhcpd in ISC DHCP 3.0.4 and 3.1.1, when the dhcp-client-identifier and hardware ethernet configuration settings are both used, allows remote attackers to cause a denial of service… Affected: 3.0.4; 3.0.4_b1; 3.0.4_b2; 3.0.4_b3; 3.1.1 |
| CVE-2009-0692 | – | Jul 14 | Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0… Affected: 2.0; 3.0; 3.1; 4.0; 4.1.0 |
Showing 25