ISC DHCPD 3.0.1 rc13
Approved changes feed: RSS · Atom
cpe:2.3:a:isc:dhcpd:3.0.1:rc13:*:*:*:*:*:*
part: a version: 3.0.1 update: rc13
| Vendor | Isc (4a2f2b37-98b6-5702-822d-72afcd17d050) |
|---|---|
| Product | Dhcpd (e7d51b37-ed94-51c9-81f7-cb0d06501b46) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/isc-dhcp |
purl2cpe | 2026-06-01 10:15:10.594376 |
pkg:deb/ubuntu/isc-dhcp |
purl2cpe | 2026-06-01 10:15:10.594378 |
pkg:github/isc-projects/dhcp |
purl2cpe | 2026-06-01 10:15:10.594380 |
pkg:gitlab/redhat/dhcp |
purl2cpe | 2026-06-01 10:15:10.594382 |
pkg:rpm/centos/dhcp |
purl2cpe | 2026-06-01 10:15:10.594383 |
pkg:rpm/fedora/dhcp |
purl2cpe | 2026-06-01 10:15:10.594385 |
pkg:rpm/opensuse/dhcp |
purl2cpe | 2026-06-01 10:15:10.594387 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2004-1006 |
vulnerable | 2026-06-03 14:26:37.852755 |
Details available
Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702.
Published: 2004-11-19T05:00:00.000Z
Updated: 2024-08-08T00:39:00.517Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0461 |
vulnerable | 2026-06-03 14:26:35.604313 |
Details available
The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.
Published: 2004-06-24T04:00:00.000Z
Updated: 2024-08-08T00:17:15.144Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0460 |
vulnerable | 2026-06-03 14:26:35.591204 |
Details available
Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, or (5) NAK messages, which can generate a long string when writing to a log file.
Published: 2004-06-24T04:00:00.000Z
Updated: 2024-08-08T00:17:15.127Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.