CVE-2018-5733

A malicious client can overflow a reference counter in ISC dhcpd

Medium · published January 16, 2019

CVSS v3.0
5.9
EPSS
20%
Percentile
97.4
In the wild
Unconfirmed
What it is

A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0.

The record
Technical detail
CVSS v3.0
5.9 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.20242 · 97.4th percentile
Published
2019-01-16T20:00Z
EPSS history
Timeline
  • 16 JAN 20:00Z
    A malicious client can overflow a reference counter in ISC dhcpd
    cvelistv5