CVE-2018-5733 (GCVE-0-2018-5733)

Vulnerability from cvelistv5 – Published: 2019-01-16 20:00 – Updated: 2025-04-25 23:02
VLAI
Title
A malicious client can overflow a reference counter in ISC dhcpd
Summary
A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0.
Severity
5.9 (Medium)
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE
  • Successful exploitation of this vulnerability may exhaust the memory available to dhcpd and/or cause it to crash, resulting in a denial of service to clients.
Assigner
isc CNA under the mitre root
CNA scorecard A 95/100 over 29 records in the last 180 days details
References
URL Tags
https://kb.isc.org/docs/aa-01567 x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:0469 vendor-advisoryx_refsource_REDHAT
https://www.debian.org/security/2018/dsa-4133 vendor-advisoryx_refsource_DEBIAN
https://usn.ubuntu.com/3586-2/ vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:0483 vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3586-1/ vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/103188 vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1040437 vdb-entryx_refsource_SECTRACK
https://lists.debian.org/debian-lts-announce/2018… mailing-listx_refsource_MLIST
https://security.netapp.com/advisory/ntap-2025042…
Impacted products
Vendor Product Version CPE status
ISC ISC DHCP Affected: ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0
guessed Create a notification for this product.
Date Public
2018-02-28 00:00
Credits
ISC would like to thank Felix Wilhelm, Google Security Team, for reporting this vulnerability.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-04-25T23:02:52.084Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kb.isc.org/docs/aa-01567"
          },
          {
            "name": "RHSA-2018:0469",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0469"
          },
          {
            "name": "DSA-4133",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4133"
          },
          {
            "name": "USN-3586-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3586-2/"
          },
          {
            "name": "RHSA-2018:0483",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0483"
          },
          {
            "name": "USN-3586-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3586-1/"
          },
          {
            "name": "103188",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/103188"
          },
          {
            "name": "1040437",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040437"
          },
          {
            "name": "[debian-lts-announce] 20180322 [SECURITY] [DLA 1313-1] isc-dhcp security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/03/msg00015.html"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20250425-0010/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "ISC DHCP",
          "vendor": "ISC",
          "versions": [
            {
              "status": "affected",
              "version": "ISC DHCP 4.1.0 -\u003e 4.1-ESV-R15, 4.2.0 -\u003e 4.2.8, 4.3.0 -\u003e 4.3.6, 4.4.0"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ISC would like to thank Felix Wilhelm, Google Security Team, for reporting this vulnerability."
        }
      ],
      "datePublic": "2018-02-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 -\u003e 4.1-ESV-R15, 4.2.0 -\u003e 4.2.8, 4.3.0 -\u003e 4.3.6, 4.4.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Successful exploitation of this vulnerability may exhaust the memory available to dhcpd and/or cause it to crash, resulting in a denial of service to clients.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-01-17T10:57:01.000Z",
        "orgId": "404fd4d2-a609-4245-b543-2c944a302a22",
        "shortName": "isc"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kb.isc.org/docs/aa-01567"
        },
        {
          "name": "RHSA-2018:0469",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0469"
        },
        {
          "name": "DSA-4133",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4133"
        },
        {
          "name": "USN-3586-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3586-2/"
        },
        {
          "name": "RHSA-2018:0483",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0483"
        },
        {
          "name": "USN-3586-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3586-1/"
        },
        {
          "name": "103188",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/103188"
        },
        {
          "name": "1040437",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040437"
        },
        {
          "name": "[debian-lts-announce] 20180322 [SECURITY] [DLA 1313-1] isc-dhcp security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/03/msg00015.html"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to the patched release most closely related to your current version of DHCP.\n\n    DHCP 4.1-ESV-R15-P1\n    DHCP 4.3.6-P1\n    DHCP 4.4.1"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "A malicious client can overflow a reference counter in ISC dhcpd",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security-officer@isc.org",
          "DATE_PUBLIC": "2018-02-28T00:00:00.000Z",
          "ID": "CVE-2018-5733",
          "STATE": "PUBLIC",
          "TITLE": "A malicious client can overflow a reference counter in ISC dhcpd"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "ISC DHCP",
                      "version": {
                        "version_data": [
                          {
                            "version_name": "ISC DHCP",
                            "version_value": "4.1.0 -\u003e 4.1-ESV-R15, 4.2.0 -\u003e 4.2.8, 4.3.0 -\u003e 4.3.6, 4.4.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "ISC"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "ISC would like to thank Felix Wilhelm, Google Security Team, for reporting this vulnerability."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 -\u003e 4.1-ESV-R15, 4.2.0 -\u003e 4.2.8, 4.3.0 -\u003e 4.3.6, 4.4.0."
            }
          ]
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Successful exploitation of this vulnerability may exhaust the memory available to dhcpd and/or cause it to crash, resulting in a denial of service to clients."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://kb.isc.org/docs/aa-01567",
              "refsource": "CONFIRM",
              "url": "https://kb.isc.org/docs/aa-01567"
            },
            {
              "name": "RHSA-2018:0469",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0469"
            },
            {
              "name": "DSA-4133",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4133"
            },
            {
              "name": "USN-3586-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3586-2/"
            },
            {
              "name": "RHSA-2018:0483",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0483"
            },
            {
              "name": "USN-3586-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3586-1/"
            },
            {
              "name": "103188",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/103188"
            },
            {
              "name": "1040437",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040437"
            },
            {
              "name": "[debian-lts-announce] 20180322 [SECURITY] [DLA 1313-1] isc-dhcp security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/03/msg00015.html"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "Upgrade to the patched release most closely related to your current version of DHCP.\n\n    DHCP 4.1-ESV-R15-P1\n    DHCP 4.3.6-P1\n    DHCP 4.4.1"
          }
        ],
        "source": {
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404fd4d2-a609-4245-b543-2c944a302a22",
    "assignerShortName": "isc",
    "cveId": "CVE-2018-5733",
    "datePublished": "2019-01-16T20:00:00.000Z",
    "dateReserved": "2018-01-17T00:00:00.000Z",
    "dateUpdated": "2025-04-25T23:02:52.084Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2018-5733",
      "date": "2026-10-19",
      "epss": "0.20242",
      "percentile": "0.97446"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "3B88B6F8-3F13-4984-BBCF-F79BE911F15D",
                  "versionEndIncluding": "4.2.8",
                  "versionStartIncluding": "4.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "ADAC6E78-8F98-42C3-BE19-276826F84752",
                  "versionEndIncluding": "4.3.6",
                  "versionStartIncluding": "4.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*",
                  "matchCriteriaId": "F27D0660-2F07-430B-A651-5D0B6AA763C0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*",
                  "matchCriteriaId": "FBAABA4E-0D34-4644-AC26-E272CEE6C361",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r10:*:*:*:*:*:*",
                  "matchCriteriaId": "179443DC-4B6A-408A-8BE5-B3E72188F43E",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r10_b1:*:*:*:*:*:*",
                  "matchCriteriaId": "C9BE7736-58CD-468B-84AB-B38C9B254BA6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r10_rc1:*:*:*:*:*:*",
                  "matchCriteriaId": "7EB6F7F0-B2A0-47E3-AD7A-4E7618A36F90",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r11:*:*:*:*:*:*",
                  "matchCriteriaId": "ADF80D19-3B0A-4A74-944E-F33CCC30EADA",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r11_b1:*:*:*:*:*:*",
                  "matchCriteriaId": "40B21FCB-43A8-4266-934D-ECFF8138F637",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc1:*:*:*:*:*:*",
                  "matchCriteriaId": "69D49F23-9074-49E7-985F-4D93393324CD",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc2:*:*:*:*:*:*",
                  "matchCriteriaId": "3F729D1D-7234-4BC2-839B-AE1BB9D16C25",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r12:*:*:*:*:*:*",
                  "matchCriteriaId": "FBA64EEC-C0C7-4F11-8131-2868691E54DB",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r12_b1:*:*:*:*:*:*",
                  "matchCriteriaId": "157520D7-AE39-4E23-A8CF-DD75EA78C055",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r12_p1:*:*:*:*:*:*",
                  "matchCriteriaId": "B07118EC-9508-42B8-8D09-5CE310DA2B43",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r13:*:*:*:*:*:*",
                  "matchCriteriaId": "A157E664-6ACE-44CE-AC07-64898B182EA1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r13_b1:*:*:*:*:*:*",
                  "matchCriteriaId": "0056BF7A-4A70-4F1D-89C2-25CCDB65217B",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r14:*:*:*:*:*:*",
                  "matchCriteriaId": "1D21F05D-246F-41F5-81FD-286C26168E2E",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r14_b1:*:*:*:*:*:*",
                  "matchCriteriaId": "12103C87-C942-481A-A68C-7BC83F964C06",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r15:*:*:*:*:*:*",
                  "matchCriteriaId": "924E91FF-495F-4963-827F-57F7340C6560",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*",
                  "matchCriteriaId": "A5E2FFC7-6E73-463E-846C-C403E41A2022",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*",
                  "matchCriteriaId": "E9D08285-745D-40AB-9A78-F467712CDA5A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:*",
                  "matchCriteriaId": "1D115F1F-1A3A-4924-AF10-723B3BB0CBB9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*",
                  "matchCriteriaId": "79F235F0-AD16-4E5B-AB60-97F0BB86AEB6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*",
                  "matchCriteriaId": "E84D5E5B-0336-4166-AAAC-49375E3AF971",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:*",
                  "matchCriteriaId": "09561C97-563C-4DDC-9EE4-E83EFFD467D6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:*",
                  "matchCriteriaId": "519CF0CC-FB12-4C68-88A0-E0E15738C620",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:*",
                  "matchCriteriaId": "80EB131E-32E5-458F-8DDA-48835D2D883F",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*",
                  "matchCriteriaId": "65E0296F-3522-4B43-AF34-CFE1AE7EEC1E",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r7:*:*:*:*:*:*",
                  "matchCriteriaId": "69F6E619-A52B-4A60-8247-41ADD0E7D655",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r8:*:*:*:*:*:*",
                  "matchCriteriaId": "AA48EBAA-10B7-43D6-9A27-99F2578DF7F6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r8_b1:*:*:*:*:*:*",
                  "matchCriteriaId": "20040BB3-F157-4505-BB60-0D919A7D1436",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r8_rc1:*:*:*:*:*:*",
                  "matchCriteriaId": "974A8587-8351-490A-82D9-B541862CA4C7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r9:*:*:*:*:*:*",
                  "matchCriteriaId": "7DABD43E-818A-4B21-B4E7-753056D4A184",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r9_b1:*:*:*:*:*:*",
                  "matchCriteriaId": "EE991D0E-2E2D-4844-9BBD-235D8BC5FB7A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r9_rc1:*:*:*:*:*:*",
                  "matchCriteriaId": "975EF88C-988F-40A6-B7D1-D27439144CC2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:rc1:*:*:*:*:*:*",
                  "matchCriteriaId": "3120B566-2BB6-4A1F-9ED7-E099E2870919",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.1.0:-:*:*:*:*:*:*",
                  "matchCriteriaId": "78214BCE-9739-40B9-A32E-89C16F7195DC",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:dhcp:4.4.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "13C8AD22-6E39-4899-88B2-7ED44BE890A6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        },
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "33C068A4-3780-4EAB-A937-6082DF847564",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "51EF4996-72F4-4FA4-814F-F5991E7A8318",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
                  "matchCriteriaId": "D99A687E-EAE6-417E-A88E-D0082BC194CD",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
                  "matchCriteriaId": "B353CE99-D57C-465B-AAB0-73EF581127D1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
                  "matchCriteriaId": "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
                  "matchCriteriaId": "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
                  "matchCriteriaId": "BF77CDCF-B9C9-427D-B2BF-36650FB2148C",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "E5ED5807-55B7-47C5-97A6-03233F4FBC3A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "825ECE2D-E232-46E0-A047-074B34DB1E97",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        },
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
                  "matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
                  "matchCriteriaId": "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
                  "matchCriteriaId": "9070C9D8-A14A-467F-8253-33B966C16886",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        },
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 -\u003e 4.1-ESV-R15, 4.2.0 -\u003e 4.2.8, 4.3.0 -\u003e 4.3.6, 4.4.0."
        },
        {
          "lang": "es",
          "value": "Un cliente malicioso al que se le permite enviar grandes cantidades de tr\u00e1fico (miles de millones de paquetes) a un servidor DHCP puede terminar desbordando un contador de referencia de 32 bits, provocando el cierre inesperado de dhcpd. Afecta a ISC DHCP desde la versi\u00f3n 4.1.0 hasta la 4.1-ESV-R15, desde la versi\u00f3n 4.2.0 hasta la 4.2.8, desde la versi\u00f3n 4.3.0 hasta la 4.3.6 y a la versi\u00f3n 4.4.0."
        }
      ],
      "id": "CVE-2018-5733",
      "lastModified": "2024-11-21T04:09:16.587",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "MEDIUM",
            "cvssData": {
              "accessComplexity": "LOW",
              "accessVector": "NETWORK",
              "authentication": "NONE",
              "availabilityImpact": "PARTIAL",
              "baseScore": 5.0,
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
              "version": "2.0"
            },
            "exploitabilityScore": 10.0,
            "impactScore": 2.9,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ],
        "cvssMetricV30": [
          {
            "cvssData": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 5.9,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.0"
            },
            "exploitabilityScore": 2.2,
            "impactScore": 3.6,
            "source": "security-officer@isc.org",
            "type": "Secondary"
          }
        ],
        "cvssMetricV31": [
          {
            "cvssData": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            },
            "exploitabilityScore": 3.9,
            "impactScore": 3.6,
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      },
      "published": "2019-01-16T20:29:00.753",
      "references": [
        {
          "source": "security-officer@isc.org",
          "tags": [
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "http://www.securityfocus.com/bid/103188"
        },
        {
          "source": "security-officer@isc.org",
          "tags": [
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "http://www.securitytracker.com/id/1040437"
        },
        {
          "source": "security-officer@isc.org",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0469"
        },
        {
          "source": "security-officer@isc.org",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0483"
        },
        {
          "source": "security-officer@isc.org",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "https://kb.isc.org/docs/aa-01567"
        },
        {
          "source": "security-officer@isc.org",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/03/msg00015.html"
        },
        {
          "source": "security-officer@isc.org",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "https://usn.ubuntu.com/3586-1/"
        },
        {
          "source": "security-officer@isc.org",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "https://usn.ubuntu.com/3586-2/"
        },
        {
          "source": "security-officer@isc.org",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4133"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "http://www.securityfocus.com/bid/103188"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "http://www.securitytracker.com/id/1040437"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0469"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0483"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "https://kb.isc.org/docs/aa-01567"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/03/msg00015.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "https://usn.ubuntu.com/3586-1/"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "https://usn.ubuntu.com/3586-2/"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4133"
        }
      ],
      "sourceIdentifier": "security-officer@isc.org",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-190"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3B88B6F8-3F13-4984-BBCF-F79BE911F15D",
                    "versionEndIncluding": "4.2.8",
                    "versionStartIncluding": "4.2.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ADAC6E78-8F98-42C3-BE19-276826F84752",
                    "versionEndIncluding": "4.3.6",
                    "versionStartIncluding": "4.3.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*",
                    "matchCriteriaId": "F27D0660-2F07-430B-A651-5D0B6AA763C0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*",
                    "matchCriteriaId": "FBAABA4E-0D34-4644-AC26-E272CEE6C361",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r10:*:*:*:*:*:*",
                    "matchCriteriaId": "179443DC-4B6A-408A-8BE5-B3E72188F43E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r10_b1:*:*:*:*:*:*",
                    "matchCriteriaId": "C9BE7736-58CD-468B-84AB-B38C9B254BA6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r10_rc1:*:*:*:*:*:*",
                    "matchCriteriaId": "7EB6F7F0-B2A0-47E3-AD7A-4E7618A36F90",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r11:*:*:*:*:*:*",
                    "matchCriteriaId": "ADF80D19-3B0A-4A74-944E-F33CCC30EADA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r11_b1:*:*:*:*:*:*",
                    "matchCriteriaId": "40B21FCB-43A8-4266-934D-ECFF8138F637",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc1:*:*:*:*:*:*",
                    "matchCriteriaId": "69D49F23-9074-49E7-985F-4D93393324CD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc2:*:*:*:*:*:*",
                    "matchCriteriaId": "3F729D1D-7234-4BC2-839B-AE1BB9D16C25",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r12:*:*:*:*:*:*",
                    "matchCriteriaId": "FBA64EEC-C0C7-4F11-8131-2868691E54DB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r12_b1:*:*:*:*:*:*",
                    "matchCriteriaId": "157520D7-AE39-4E23-A8CF-DD75EA78C055",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r12_p1:*:*:*:*:*:*",
                    "matchCriteriaId": "B07118EC-9508-42B8-8D09-5CE310DA2B43",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r13:*:*:*:*:*:*",
                    "matchCriteriaId": "A157E664-6ACE-44CE-AC07-64898B182EA1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r13_b1:*:*:*:*:*:*",
                    "matchCriteriaId": "0056BF7A-4A70-4F1D-89C2-25CCDB65217B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r14:*:*:*:*:*:*",
                    "matchCriteriaId": "1D21F05D-246F-41F5-81FD-286C26168E2E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r14_b1:*:*:*:*:*:*",
                    "matchCriteriaId": "12103C87-C942-481A-A68C-7BC83F964C06",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r15:*:*:*:*:*:*",
                    "matchCriteriaId": "924E91FF-495F-4963-827F-57F7340C6560",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*",
                    "matchCriteriaId": "A5E2FFC7-6E73-463E-846C-C403E41A2022",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*",
                    "matchCriteriaId": "E9D08285-745D-40AB-9A78-F467712CDA5A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:*",
                    "matchCriteriaId": "1D115F1F-1A3A-4924-AF10-723B3BB0CBB9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*",
                    "matchCriteriaId": "79F235F0-AD16-4E5B-AB60-97F0BB86AEB6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*",
                    "matchCriteriaId": "E84D5E5B-0336-4166-AAAC-49375E3AF971",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:*",
                    "matchCriteriaId": "09561C97-563C-4DDC-9EE4-E83EFFD467D6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:*",
                    "matchCriteriaId": "519CF0CC-FB12-4C68-88A0-E0E15738C620",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:*",
                    "matchCriteriaId": "80EB131E-32E5-458F-8DDA-48835D2D883F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*",
                    "matchCriteriaId": "65E0296F-3522-4B43-AF34-CFE1AE7EEC1E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r7:*:*:*:*:*:*",
                    "matchCriteriaId": "69F6E619-A52B-4A60-8247-41ADD0E7D655",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r8:*:*:*:*:*:*",
                    "matchCriteriaId": "AA48EBAA-10B7-43D6-9A27-99F2578DF7F6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r8_b1:*:*:*:*:*:*",
                    "matchCriteriaId": "20040BB3-F157-4505-BB60-0D919A7D1436",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r8_rc1:*:*:*:*:*:*",
                    "matchCriteriaId": "974A8587-8351-490A-82D9-B541862CA4C7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r9:*:*:*:*:*:*",
                    "matchCriteriaId": "7DABD43E-818A-4B21-B4E7-753056D4A184",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r9_b1:*:*:*:*:*:*",
                    "matchCriteriaId": "EE991D0E-2E2D-4844-9BBD-235D8BC5FB7A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r9_rc1:*:*:*:*:*:*",
                    "matchCriteriaId": "975EF88C-988F-40A6-B7D1-D27439144CC2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:rc1:*:*:*:*:*:*",
                    "matchCriteriaId": "3120B566-2BB6-4A1F-9ED7-E099E2870919",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.1.0:-:*:*:*:*:*:*",
                    "matchCriteriaId": "78214BCE-9739-40B9-A32E-89C16F7195DC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:isc:dhcp:4.4.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "13C8AD22-6E39-4899-88B2-7ED44BE890A6",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "33C068A4-3780-4EAB-A937-6082DF847564",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "51EF4996-72F4-4FA4-814F-F5991E7A8318",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D99A687E-EAE6-417E-A88E-D0082BC194CD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B353CE99-D57C-465B-AAB0-73EF581127D1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BF77CDCF-B9C9-427D-B2BF-36650FB2148C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E5ED5807-55B7-47C5-97A6-03233F4FBC3A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "825ECE2D-E232-46E0-A047-074B34DB1E97",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
                    "matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
                    "matchCriteriaId": "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9070C9D8-A14A-467F-8253-33B966C16886",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 -\u003e 4.1-ESV-R15, 4.2.0 -\u003e 4.2.8, 4.3.0 -\u003e 4.3.6, 4.4.0."
          },
          {
            "lang": "es",
            "value": "Un cliente malicioso al que se le permite enviar grandes cantidades de tr\u00e1fico (miles de millones de paquetes) a un servidor DHCP puede terminar desbordando un contador de referencia de 32 bits, provocando el cierre inesperado de dhcpd. Afecta a ISC DHCP desde la versi\u00f3n 4.1.0 hasta la 4.1-ESV-R15, desde la versi\u00f3n 4.2.0 hasta la 4.2.8, desde la versi\u00f3n 4.3.0 hasta la 4.3.6 y a la versi\u00f3n 4.4.0."
          }
        ],
        "id": "CVE-2018-5733",
        "lastModified": "2025-04-25T23:15:15.590",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 5.0,
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV30": [
            {
              "cvssData": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 5.9,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.0"
              },
              "exploitabilityScore": 2.2,
              "impactScore": 3.6,
              "source": "security-officer@isc.org",
              "type": "Secondary"
            }
          ],
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2019-01-16T20:29:00.753",
        "references": [
          {
            "source": "security-officer@isc.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securityfocus.com/bid/103188"
          },
          {
            "source": "security-officer@isc.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securitytracker.com/id/1040437"
          },
          {
            "source": "security-officer@isc.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0469"
          },
          {
            "source": "security-officer@isc.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0483"
          },
          {
            "source": "security-officer@isc.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://kb.isc.org/docs/aa-01567"
          },
          {
            "source": "security-officer@isc.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/03/msg00015.html"
          },
          {
            "source": "security-officer@isc.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://usn.ubuntu.com/3586-1/"
          },
          {
            "source": "security-officer@isc.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://usn.ubuntu.com/3586-2/"
          },
          {
            "source": "security-officer@isc.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4133"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securityfocus.com/bid/103188"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securitytracker.com/id/1040437"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0469"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0483"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://kb.isc.org/docs/aa-01567"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/03/msg00015.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://security.netapp.com/advisory/ntap-20250425-0010/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://usn.ubuntu.com/3586-1/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://usn.ubuntu.com/3586-2/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4133"
          }
        ],
        "sourceIdentifier": "security-officer@isc.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-190"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-06-30T11:45:07+00:00",
      "cve": "CVE-2018-5733",
      "id": "CVE-2018-5733",
      "initial_release_date": "2018-02-28T00:00:00+00:00",
      "product_status:fixed": "156",
      "product_status:known_affected": "1",
      "product_status:known_not_affected": "6",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "dhcp: Reference count overflow in dhcpd allows denial of service",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2018/cve-2018-5733.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-14T00:04:46Z",
      "cve": "CVE-2018-5733",
      "id": "CVE-2018-5733",
      "initial_release_date": "2023-02-15T04:31:31Z",
      "product_status:known_affected": "402",
      "product_status:known_not_affected": "106",
      "product_status:recommended": "404",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2018-5733",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2018-5733.json",
      "version": "47"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.