A specially constructed response from a malicious server can cause a buffer overflow in dhclient

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• isc dhcp4.1.0 and later · up to 4.1.2 inclusive
• isc dhcp4.2.0 and later · before 4.2.8
• isc dhcp4.3.0 and later · before 4.3.6
• isc dhcp4.1-esv
• isc dhcp4.1.2
• isc dhcp4.4.0

Versions reported by the vendor

Affected version ranges reported by the assigning authority (isc). Independent of NVD's CPE analysis and usually ahead of it.

• ISC ISC DHCP

  • ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0affected

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2011-0997dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers t
  55Plan
• CVE-2017-3144Failure to properly clean up closed OMAPI connections can exhaust available sockets
  52Plan
• CVE-2015-8605ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash
  51Plan
• CVE-2009-0692Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1
  48Plan
• CVE-2016-2774ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows rem
  45Plan
• CVE-2011-2749The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a
  43Plan

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.