Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-2929

Fixed in a distro release EPSS <1%CVSS 6.5

In ISC DHCP 1.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1 a system with access to a DHCP server, sending DHCP packets crafted to include fqdn labels longer than 63 bytes, could eventually cause the server to run out of memory.

Published 2022-10-07 · CVE record · OSV

Products: ISC DHCP

Distro releases

ReleasePackageFixed in
AlmaLinux:8dhcp-client12:4.3.6-49.el8
AlmaLinux:8dhcp-common12:4.3.6-49.el8
AlmaLinux:8dhcp-libs12:4.3.6-49.el8
AlmaLinux:8dhcp-relay12:4.3.6-49.el8
AlmaLinux:8dhcp-server12:4.3.6-49.el8
AlmaLinux:9dhcp-client12:4.4.2-18.b1.el9
AlmaLinux:9dhcp-common12:4.4.2-18.b1.el9
AlmaLinux:9dhcp-relay12:4.4.2-18.b1.el9
AlmaLinux:9dhcp-server12:4.4.2-18.b1.el9
Alpine:v3.13dhcp4.4.3_p1-r0
Alpine:v3.14dhcp4.4.3_p1-r0
Alpine:v3.15dhcp4.4.3_p1-r0
Alpine:v3.16dhcp4.4.3_p1-r0
Alpine:v3.17dhcp4.4.3_p1-r0
Alpine:v3.18dhcp4.4.3_p1-r0
Alpine:v3.19dhcp4.4.3_p1-r0
Alpine:v3.20dhcp4.4.3_p1-r0
Debian:10isc-dhcp4.4.1-2+deb10u2
Debian:11isc-dhcp4.4.1-2.3+deb11u1
Debian:12isc-dhcp4.4.3-2.1
Debian:13isc-dhcp4.4.3-2.1
Red Hat:enterprise_linux:8dhcp12:4.3.6-49.el8
Red Hat:enterprise_linux:8dhcp-client12:4.3.6-49.el8
Red Hat:enterprise_linux:8dhcp-client-debuginfo12:4.3.6-49.el8
Red Hat:enterprise_linux:8dhcp-common12:4.3.6-49.el8
Red Hat:enterprise_linux:8dhcp-debuginfo12:4.3.6-49.el8
Red Hat:enterprise_linux:8dhcp-debugsource12:4.3.6-49.el8
Red Hat:enterprise_linux:8dhcp-libs12:4.3.6-49.el8
Red Hat:enterprise_linux:8dhcp-libs-debuginfo12:4.3.6-49.el8
Red Hat:enterprise_linux:8dhcp-relay12:4.3.6-49.el8
Red Hat:enterprise_linux:8dhcp-relay-debuginfo12:4.3.6-49.el8
Red Hat:enterprise_linux:8dhcp-server12:4.3.6-49.el8
Red Hat:enterprise_linux:8dhcp-server-debuginfo12:4.3.6-49.el8
Red Hat:enterprise_linux:9dhcp12:4.4.2-18.b1.el9
Red Hat:enterprise_linux:9dhcp-client12:4.4.2-18.b1.el9
Red Hat:enterprise_linux:9dhcp-client-debuginfo12:4.4.2-18.b1.el9
Red Hat:enterprise_linux:9dhcp-common12:4.4.2-18.b1.el9
Red Hat:enterprise_linux:9dhcp-debuginfo12:4.4.2-18.b1.el9
Red Hat:enterprise_linux:9dhcp-debugsource12:4.4.2-18.b1.el9
Red Hat:enterprise_linux:9dhcp-relay12:4.4.2-18.b1.el9
Red Hat:enterprise_linux:9dhcp-relay-debuginfo12:4.4.2-18.b1.el9
Red Hat:enterprise_linux:9dhcp-server12:4.4.2-18.b1.el9
Red Hat:enterprise_linux:9dhcp-server-debuginfo12:4.4.2-18.b1.el9
SUSE:Linux Enterprise Module for Basesystem 15 SP3dhcp4.3.6.P1-150000.6.17.1
SUSE:Linux Enterprise Module for Basesystem 15 SP4dhcp4.3.6.P1-150000.6.17.1
SUSE:Linux Enterprise Module for Server Applications 15 SP3dhcp4.3.6.P1-150000.6.17.1
SUSE:Linux Enterprise Module for Server Applications 15 SP4dhcp4.3.6.P1-150000.6.17.1
SUSE:Linux Enterprise Server 12 SP5dhcp4.3.3-10.28.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP5dhcp4.3.3-10.28.1
SUSE:Linux Enterprise Software Development Kit 12 SP5dhcp4.3.3-10.28.1
Ubuntu:18.04:LTSisc-dhcp4.3.5-3ubuntu7.4
Ubuntu:20.04:LTSisc-dhcp4.4.1-2.1ubuntu5.20.04.4
Ubuntu:22.04:LTSisc-dhcp4.4.1-2.3ubuntu2.3
Ubuntu:Pro:14.04:LTSisc-dhcp4.2.4-7ubuntu12.13+esm2
Ubuntu:Pro:16.04:LTSisc-dhcp4.3.3-5ubuntu12.10+esm2
openSUSE:Leap 15.3dhcp4.3.6.P1-150000.6.17.1
openSUSE:Leap 15.4dhcp4.3.6.P1-150000.6.17.1
openSUSE:Tumbleweeddhcp4.4.2.P1-11.1