← Back

CVE-2022-2929

nvd nist
Published: Oct 7, 2022Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD (Secondary)

Description

In ISC DHCP 1.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1 a system with access to a DHCP server, sending DHCP packets crafted to include fqdn labels longer than 63 bytes, could eventually cause the server to run out of memory.

Affected (35)

Isc
1 product
Dhcp
Debian
1 product
Debian Linux
Fedoraproject
1 product
Fedora
Configuration A
31 vulnerable
Vulnerable SoftwareAffected Versions
Isc
Dhcp
From 1.0.0 to 4.1-esv
Dhcp
From 4.2.0 to 4.4.3
Dhcp
Version 4.1-esv r10
Dhcp
Version 4.1-esv r10_b1
Dhcp
Version 4.1-esv r10_rc1
Dhcp
Version 4.1-esv r10b1
Dhcp
Version 4.1-esv r10rc1
Dhcp
Version 4.1-esv r11
Dhcp
Version 4.1-esv r11_b1
Dhcp
Version 4.1-esv r11_rc1
Dhcp
Version 4.1-esv r11_rc2
Dhcp
Version 4.1-esv r11b1
Dhcp
Version 4.1-esv r11rc1
Dhcp
Version 4.1-esv r11rc2
Dhcp
Version 4.1-esv r12-p1
Dhcp
Version 4.1-esv r12
Dhcp
Version 4.1-esv r12_b1
Dhcp
Version 4.1-esv r12_p1
Dhcp
Version 4.1-esv r12b1
Dhcp
Version 4.1-esv r13
Dhcp
Version 4.1-esv r13_b1
Dhcp
Version 4.1-esv r13b1
Dhcp
Version 4.1-esv r14
Dhcp
Version 4.1-esv r14_b1
Dhcp
Version 4.1-esv r14b1
Dhcp
Version 4.1-esv r15-p1
Dhcp
Version 4.1-esv r15
Dhcp
Version 4.1-esv r15_b1
Dhcp
Version 4.1-esv r16-p1
Dhcp
Version 4.1-esv r16
Dhcp
Version 4.1-esv r1
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 10.0
Configuration C
3 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Fedora
Version 35
Fedora
Version 36
Fedora
Version 37

Related CWEs

CWE-770
Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (12)

Source: security-officer@isc.org
Vendor Advisory
Source: security-officer@isc.org
Mailing ListThird Party Advisory
Source: security-officer@isc.org
Source: security-officer@isc.org
Source: security-officer@isc.org
Source: security-officer@isc.org
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.