Approved changes feed: RSS · Atom

cpe:2.3:a:isc:dhcp:4.0.0:*:*:*:*:*:*:*

part: a version: 4.0.0 update: *

VendorIsc (4a2f2b37-98b6-5702-822d-72afcd17d050)
ProductDhcp (4e92e1a9-a8b0-5696-8d39-7119e87ecd86)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/isc-projects/dhcp purl2cpe 2026-06-01 10:15:10.717541

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-8605 vulnerable 2026-06-08 05:07:04.471256 Details available
ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.
Published: 2016-01-14T22:00:00.000Z
Updated: 2024-08-06T08:20:43.591Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4868 vulnerable 2026-06-08 04:59:33.379970 Details available
The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS (DDNS) and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets related to a lease-status update.
Published: 2012-01-15T02:00:00.000Z
Updated: 2024-08-07T00:16:35.122Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4539 vulnerable 2026-06-08 04:59:31.774176 Details available
dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service (daemon crash) via a crafted request packet.
Published: 2011-12-08T11:00:00.000Z
Updated: 2024-08-07T00:09:18.744Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2749 vulnerable 2026-06-08 04:58:09.061659 Details available
The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted BOOTP packet.
Published: 2011-08-15T21:00:00.000Z
Updated: 2024-08-06T23:08:23.964Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2748 vulnerable 2026-06-08 04:58:09.041399 Details available
The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted DHCP packet.
Published: 2011-08-15T21:00:00.000Z
Updated: 2024-08-06T23:08:23.745Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0413 vulnerable 2026-06-08 04:56:36.938035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3611 vulnerable 2026-06-08 04:55:15.777303 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2156 vulnerable 2026-06-08 04:54:11.816941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.