CVE-2018-5732
Fixed in a distro release EPSS 5%CVSS 7.5
Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a response containing a specially constructed options section. Affects ISC DHCP versions 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0
Products: ISC DHCP
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | dhcp | 4.4.1-r0 |
| Alpine 3.11 | dhcp | 4.4.1-r0 |
| Alpine 3.12 | dhcp | 4.4.1-r0 |
| Alpine 3.13 | dhcp | 4.4.1-r0 |
| Alpine 3.14 | dhcp | 4.4.1-r0 |
| Alpine 3.15 | dhcp | 4.4.1-r0 |
| Alpine 3.16 | dhcp | 4.4.1-r0 |
| Alpine 3.17 | dhcp | 4.4.1-r0 |
| Alpine 3.18 | dhcp | 4.4.1-r0 |
| Alpine 3.19 | dhcp | 4.4.1-r0 |
| Alpine 3.20 | dhcp | 4.4.1-r0 |
| Debian 12 | isc-dhcp | 4.3.5-3.1 |
| Debian 13 | isc-dhcp | 4.3.5-3.1 |
| Debian 7 | isc-dhcp | 4.2.2.dfsg.1-5+deb70u9 |
| Debian 8 | isc-dhcp | 4.3.1-6+deb8u3 |
| Debian 9 | isc-dhcp | 4.3.5-3+deb9u1 |
| Red Hat Enterprise Linux 6 | dhclient | 12:4.1.1-53.P1.el6_9.3 |
| Red Hat Enterprise Linux 6 | dhcp | 12:4.1.1-53.P1.el6_9.3 |
| Red Hat Enterprise Linux 6 | dhcp-common | 12:4.1.1-53.P1.el6_9.3 |
| Red Hat Enterprise Linux 6 | dhcp-debuginfo | 12:4.1.1-53.P1.el6_9.3 |
| Red Hat Enterprise Linux 6 | dhcp-devel | 12:4.1.1-53.P1.el6_9.3 |
| Red Hat Enterprise Linux 7 | dhclient | 12:4.2.5-58.el7_4.3 |
| Red Hat Enterprise Linux 7 | dhcp | 12:4.2.5-58.el7_4.3 |
| Red Hat Enterprise Linux 7 | dhcp-common | 12:4.2.5-58.el7_4.3 |
| Red Hat Enterprise Linux 7 | dhcp-debuginfo | 12:4.2.5-58.el7_4.3 |
| Red Hat Enterprise Linux 7 | dhcp-devel | 12:4.2.5-58.el7_4.3 |
| Red Hat Enterprise Linux 7 | dhcp-libs | 12:4.2.5-58.el7_4.3 |
| SUSE Linux Enterprise Desktop 12 SP2 | dhcp | 4.3.3-10.14.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | dhcp | 4.3.3-10.14.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | dhcp | 4.2.4.P2-0.28.8.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | dhcp | 4.2.4.P2-0.28.8.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | dhcp | 4.2.4.P2-0.28.8.1 |
| SUSE Linux Enterprise Server 11 SP4 | dhcp | 4.2.4.P2-0.28.8.1 |
| SUSE Linux Enterprise Server 12 SP2 | dhcp | 4.3.3-10.14.1 |
| SUSE Linux Enterprise Server 12 SP3 | dhcp | 4.3.3-10.14.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | dhcp | 4.3.3-10.14.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | dhcp | 4.2.4.P2-0.28.8.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | dhcp | 4.3.3-10.14.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | dhcp | 4.3.3-10.14.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | dhcp | 4.2.4.P2-0.28.8.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | dhcp | 4.3.3-10.14.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | dhcp | 4.3.3-10.14.1 |
| Ubuntu 14.04 LTS | isc-dhcp | 4.2.4-7ubuntu12.12 |
| Ubuntu 16.04 LTS | isc-dhcp | 4.3.3-5ubuntu12.9 |
| Ubuntu 18.04 LTS | isc-dhcp | 4.3.5-3ubuntu5 |
| openSUSE Tumbleweed | dhcp | 4.4.2.P1-2.4 |