CVE-2018-5733

A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0.

Link	Resource
https://kb.isc.org/docs/aa-01567	Vendor Advisory
https://www.debian.org/security/2018/dsa-4133	Third Party Advisory
https://usn.ubuntu.com/3586-2/	Third Party Advisory
https://usn.ubuntu.com/3586-1/	Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/03/msg00015.html	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0483	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0469	Third Party Advisory
http://www.securitytracker.com/id/1040437	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/103188	Third Party Advisory VDB Entry

Configuration 1

cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r12:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc1:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r11_b1:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r8_rc1:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r8:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r9_rc1:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r10_b1:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r9_b1:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r10:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r12_b1:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc2:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:rc1:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r8_b1:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r9:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r7:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r10_rc1:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r11:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r12_p1:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r13:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r13_b1:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r14:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r14_b1:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:r15:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.4.0:*:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:* cpe:2.3:a:isc:dhcp:4.1.0:-:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

---

Published : 2019-01-16 08:29

Updated : 2020-01-09 09:08

---

NVD link : CVE-2018-5733

Mitre link : CVE-2018-5733

No products.

CWE-190