Approved changes feed: RSS · Atom

cpe:2.3:a:isc:dhcpd:3.0.1:rc9:*:*:*:*:*:*

part: a version: 3.0.1 update: rc9

VendorIsc (4a2f2b37-98b6-5702-822d-72afcd17d050)
ProductDhcpd (e7d51b37-ed94-51c9-81f7-cb0d06501b46)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/isc-dhcp purl2cpe 2026-06-01 10:15:10.594492
pkg:deb/ubuntu/isc-dhcp purl2cpe 2026-06-01 10:15:10.594494
pkg:github/isc-projects/dhcp purl2cpe 2026-06-01 10:15:10.594495
pkg:gitlab/redhat/dhcp purl2cpe 2026-06-01 10:15:10.594497
pkg:rpm/centos/dhcp purl2cpe 2026-06-01 10:15:10.594499
pkg:rpm/fedora/dhcp purl2cpe 2026-06-01 10:15:10.594501
pkg:rpm/opensuse/dhcp purl2cpe 2026-06-01 10:15:10.594503

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-1006 vulnerable 2026-06-08 04:47:52.281787 Details available
Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702.
Published: 2004-11-19T05:00:00.000Z
Updated: 2024-08-08T00:39:00.517Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0039 vulnerable 2026-06-08 04:47:20.330822 Details available
ISC dhcrelay (dhcp-relay) 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (packet storm) via a certain BOOTP packet that is forwarded to a broadcast MAC address, causing an infinite loop that is not restricted by a hop count.
Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T01:43:35.382Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.