A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0.
References
| Link | Resource |
|---|---|
| https://kb.isc.org/docs/aa-01567 | Vendor Advisory |
| https://www.debian.org/security/2018/dsa-4133 | Third Party Advisory |
| https://usn.ubuntu.com/3586-2/ | Third Party Advisory |
| https://usn.ubuntu.com/3586-1/ | Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2018/03/msg00015.html | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2018:0483 | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2018:0469 | Third Party Advisory |
| http://www.securitytracker.com/id/1040437 | Third Party Advisory VDB Entry |
| http://www.securityfocus.com/bid/103188 | Third Party Advisory VDB Entry |
Advertisement
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Information
Published : 2019-01-16 12:29
Updated : 2020-01-09 13:08
NVD link : CVE-2018-5733
Mitre link : CVE-2018-5733
JSON object : View
CWE
CWE-190
Integer Overflow or Wraparound
Advertisement
Products Affected
redhat
- enterprise_linux_desktop
- enterprise_linux_server_aus
- enterprise_linux_workstation
- enterprise_linux_server_eus
- enterprise_linux_server
isc
- dhcp
canonical
- ubuntu_linux
debian
- debian_linux