isc dhcp CVE-2018-5733 vulnerability in ISC and Other Products
Published on January 16, 2019

A malicious client can overflow a reference counter in ISC dhcpd

product logo product logo product logo product logo
A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2018-5733

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-5733 are published in these products:

ISC Dhcp
 
Canonical Ubuntu Linux
 
Debian Linux
 
Red Hat Enterprise Linux Desktop
 
Red Hat Enterprise Linux Server
 
Red Hat Enterprise Linux Server Aus
 
Red Hat Enterprise Linux Server Eus
 
Red Hat Enterprise Linux Workstation
 

Affected Versions

ISC DHCP Version ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0 is affected by CVE-2018-5733

Exploit Probability

EPSS
11.32%
Percentile
93.41%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.