CVE-2018-5732

Published: Oct 9, 2019Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a response containing a specially constructed options section. Affects ISC DHCP versions 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0

Affected (38)

Products: Isc: Dhcp

Isc

1 product

Dhcp

Configuration A

38 vulnerable

Vulnerable Software	Affected Versions
Isc Dhcp	From 4.1.0 to 4.1.2
Isc Dhcp	From 4.2.0 to 4.2.8
Isc Dhcp	From 4.3.0 to 4.3.6
Isc Dhcp	Version 4.1-esv
Isc Dhcp	Version 4.1-esv r10
Isc Dhcp	Version 4.1-esv r10b1
Isc Dhcp	Version 4.1-esv r10rc1
Isc Dhcp	Version 4.1-esv r11
Isc Dhcp	Version 4.1-esv r11b1
Isc Dhcp	Version 4.1-esv r11rc1
Isc Dhcp	Version 4.1-esv r11rc2
Isc Dhcp	Version 4.1-esv r12-p1
Isc Dhcp	Version 4.1-esv r12
Isc Dhcp	Version 4.1-esv r12b1
Isc Dhcp	Version 4.1-esv r13
Isc Dhcp	Version 4.1-esv r13b1
Isc Dhcp	Version 4.1-esv r14
Isc Dhcp	Version 4.1-esv r14b1
Isc Dhcp	Version 4.1-esv r15
Isc Dhcp	Version 4.1-esv r1
Isc Dhcp	Version 4.1-esv r2
Isc Dhcp	Version 4.1-esv r3
Isc Dhcp	Version 4.1-esv r3b1
Isc Dhcp	Version 4.1-esv r4
Isc Dhcp	Version 4.1-esv r5
Isc Dhcp	Version 4.1-esv r5b1
Isc Dhcp	Version 4.1-esv r5rc1
Isc Dhcp	Version 4.1-esv r5rc2
Isc Dhcp	Version 4.1-esv r6
Isc Dhcp	Version 4.1-esv r7
Isc Dhcp	Version 4.1-esv r8
Isc Dhcp	Version 4.1-esv r8b1
Isc Dhcp	Version 4.1-esv r8rc1
Isc Dhcp	Version 4.1-esv r9
Isc Dhcp	Version 4.1-esv r9b1
Isc Dhcp	Version 4.1-esv r9rc1
Isc Dhcp	Version 4.1.2 p1
Isc Dhcp	Version 4.4.0

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

https://kb.isc.org/docs/aa-01565

Source: security-officer@isc.org

Vendor Advisory

https://kb.isc.org/docs/aa-01565

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.