Approved changes feed: RSS · Atom

cpe:2.3:a:isc:dhcp:4.1-esv:r9rc1:*:*:*:*:*:*

part: a version: 4.1-esv update: r9rc1

VendorIsc (4a2f2b37-98b6-5702-822d-72afcd17d050)
ProductDhcp (4e92e1a9-a8b0-5696-8d39-7119e87ecd86)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/isc-projects/dhcp purl2cpe 2026-06-01 10:15:10.728653

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-5732 vulnerable 2026-06-08 05:11:51.693828 A specially constructed response from a malicious server can cause a buffer overflow in dhclient
HIGH (7.5)
Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a response containing a specially constructed options section. Affects ISC DHCP versions 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0
Published: 2019-10-09T14:17:14.251Z
Updated: 2024-09-16T18:19:36.136Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.