Vulnerability-Lookup

ubuntu-cve-2018-5732

Vulnerability from osv_ubuntu

Published

2018-03-01 00:00

Modified

2026-04-22 07:38

Summary

Details

Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a response containing a specially constructed options section. Affects ISC DHCP versions 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0

Severity

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 (High)


                    
                      CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2018-5732	REPORT
	https://kb.isc.org/article/AA-01565/75/CVE-2018-5732	REPORT
	https://ubuntu.com/security/notices/USN-3586-1	ADVISORY
	https://ubuntu.com/security/notices/USN-3586-2	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2018-5732	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "isc-dhcp-client",
            "binary_version": "4.2.4-7ubuntu12.12"
          },
          {
            "binary_name": "isc-dhcp-client-noddns",
            "binary_version": "4.2.4-7ubuntu12.12"
          },
          {
            "binary_name": "isc-dhcp-common",
            "binary_version": "4.2.4-7ubuntu12.12"
          },
          {
            "binary_name": "isc-dhcp-relay",
            "binary_version": "4.2.4-7ubuntu12.12"
          },
          {
            "binary_name": "isc-dhcp-server",
            "binary_version": "4.2.4-7ubuntu12.12"
          },
          {
            "binary_name": "isc-dhcp-server-ldap",
            "binary_version": "4.2.4-7ubuntu12.12"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "isc-dhcp",
        "purl": "pkg:deb/ubuntu/isc-dhcp@4.2.4-7ubuntu12.12?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.2.4-7ubuntu12.12"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.2.4-7ubuntu8",
        "4.2.4-7ubuntu9",
        "4.2.4-7ubuntu10",
        "4.2.4-7ubuntu11",
        "4.2.4-7ubuntu12",
        "4.2.4-7ubuntu12.1",
        "4.2.4-7ubuntu12.2",
        "4.2.4-7ubuntu12.3",
        "4.2.4-7ubuntu12.4",
        "4.2.4-7ubuntu12.5",
        "4.2.4-7ubuntu12.6",
        "4.2.4-7ubuntu12.7",
        "4.2.4-7ubuntu12.8",
        "4.2.4-7ubuntu12.9",
        "4.2.4-7ubuntu12.10"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "isc-dhcp-client",
            "binary_version": "4.3.3-5ubuntu12.9"
          },
          {
            "binary_name": "isc-dhcp-client-ddns",
            "binary_version": "4.3.3-5ubuntu12.9"
          },
          {
            "binary_name": "isc-dhcp-common",
            "binary_version": "4.3.3-5ubuntu12.9"
          },
          {
            "binary_name": "isc-dhcp-relay",
            "binary_version": "4.3.3-5ubuntu12.9"
          },
          {
            "binary_name": "isc-dhcp-server",
            "binary_version": "4.3.3-5ubuntu12.9"
          },
          {
            "binary_name": "isc-dhcp-server-ldap",
            "binary_version": "4.3.3-5ubuntu12.9"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "isc-dhcp",
        "purl": "pkg:deb/ubuntu/isc-dhcp@4.3.3-5ubuntu12.9?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.3.3-5ubuntu12.9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.3.1-5ubuntu3",
        "4.3.1-5ubuntu4",
        "4.3.1-5ubuntu5",
        "4.3.3-5ubuntu1",
        "4.3.3-5ubuntu2",
        "4.3.3-5ubuntu4",
        "4.3.3-5ubuntu5",
        "4.3.3-5ubuntu7",
        "4.3.3-5ubuntu8",
        "4.3.3-5ubuntu9",
        "4.3.3-5ubuntu10",
        "4.3.3-5ubuntu11",
        "4.3.3-5ubuntu12",
        "4.3.3-5ubuntu12.1",
        "4.3.3-5ubuntu12.3",
        "4.3.3-5ubuntu12.4",
        "4.3.3-5ubuntu12.6",
        "4.3.3-5ubuntu12.7"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "isc-dhcp-client",
            "binary_version": "4.3.5-3ubuntu5"
          },
          {
            "binary_name": "isc-dhcp-client-ddns",
            "binary_version": "4.3.5-3ubuntu5"
          },
          {
            "binary_name": "isc-dhcp-common",
            "binary_version": "4.3.5-3ubuntu5"
          },
          {
            "binary_name": "isc-dhcp-relay",
            "binary_version": "4.3.5-3ubuntu5"
          },
          {
            "binary_name": "isc-dhcp-server",
            "binary_version": "4.3.5-3ubuntu5"
          },
          {
            "binary_name": "isc-dhcp-server-ldap",
            "binary_version": "4.3.5-3ubuntu5"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "isc-dhcp",
        "purl": "pkg:deb/ubuntu/isc-dhcp@4.3.5-3ubuntu5?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.3.5-3ubuntu5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.3.5-3ubuntu2",
        "4.3.5-3ubuntu3",
        "4.3.5-3ubuntu4"
      ]
    }
  ],
  "aliases": [],
  "details": "Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a response containing a specially constructed options section. Affects ISC DHCP versions 4.1.0 -\u003e 4.1-ESV-R15, 4.2.0 -\u003e 4.2.8, 4.3.0 -\u003e 4.3.6, 4.4.0",
  "id": "UBUNTU-CVE-2018-5732",
  "modified": "2026-04-22T07:38:32Z",
  "published": "2018-03-01T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5732"
    },
    {
      "type": "REPORT",
      "url": "https://kb.isc.org/article/AA-01565/75/CVE-2018-5732"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3586-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3586-2"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-5732"
    }
  ],
  "related": [
    "USN-3586-1",
    "USN-3586-2"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2018-5732"
  ]
}

CVE-2018-5732 (GCVE-0-2018-5732)

Vulnerability from cvelistv5 – Published: 2019-10-09 14:17 – Updated: 2024-09-16 18:19

Title

A specially constructed response from a malicious server can cause a buffer overflow in dhclient

Summary

Severity

7.5 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

Affected versions of dhclient should crash due to an out-of-bounds memory access if they receive and process a triggering response packet. However, buffer overflow outcomes can vary by operating system, and outcomes such as remote code execution may be possible in some circumstances. Where they are present, operating system mitigation strategies such as address space layout randomization (ASLR) should make it difficult to leverage this vulnerability to achieve remote code execution, but we cannot rule it out as impossible. The safest course is to patch dhclient so that the buffer overflow cannot occur.

Assigner

isc

References

1 reference

URL	Tags
https://kb.isc.org/docs/aa-01565	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
ISC	ISC DHCP	Affected: ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0

Date Public

2018-02-28 00:00

Credits

ISC would like to thank Felix Wilhelm, Google Security Team, for reporting this vulnerability.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T05:40:51.169Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kb.isc.org/docs/aa-01565"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "ISC DHCP",
          "vendor": "ISC",
          "versions": [
            {
              "status": "affected",
              "version": "ISC DHCP 4.1.0 -\u003e 4.1-ESV-R15, 4.2.0 -\u003e 4.2.8, 4.3.0 -\u003e 4.3.6, 4.4.0"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ISC would like to thank Felix Wilhelm, Google Security Team, for reporting this vulnerability."
        }
      ],
      "datePublic": "2018-02-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a response containing a specially constructed options section. Affects ISC DHCP versions 4.1.0 -\u003e 4.1-ESV-R15, 4.2.0 -\u003e 4.2.8, 4.3.0 -\u003e 4.3.6, 4.4.0"
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Affected versions of dhclient should crash due to an out-of-bounds memory access if they receive and process a triggering response packet. However, buffer overflow outcomes can vary by operating system, and outcomes such as remote code execution may be possible in some circumstances. Where they are present, operating system mitigation strategies such as address space layout randomization (ASLR) should make it difficult to leverage this vulnerability to achieve remote code execution, but we cannot rule it out as impossible. The safest course is to patch dhclient so that the buffer overflow cannot occur.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-10-09T14:17:14.000Z",
        "orgId": "404fd4d2-a609-4245-b543-2c944a302a22",
        "shortName": "isc"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kb.isc.org/docs/aa-01565"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to the patched release most closely related to your current version of DHCP. ISC DHCP releases are available from https://www.isc.org/downloads.\n\n \u003e=   DHCP 4.1-ESV-R15-P1\n \u003e=   DHCP 4.3.6-P1\n \u003e=   DHCP 4.4.1"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "A specially constructed response from a malicious server can cause a buffer overflow in dhclient",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security-officer@isc.org",
          "DATE_PUBLIC": "2018-02-28T00:00:00.000Z",
          "ID": "CVE-2018-5732",
          "STATE": "PUBLIC",
          "TITLE": "A specially constructed response from a malicious server can cause a buffer overflow in dhclient"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "ISC DHCP",
                      "version": {
                        "version_data": [
                          {
                            "version_name": "ISC DHCP",
                            "version_value": "4.1.0 -\u003e 4.1-ESV-R15, 4.2.0 -\u003e 4.2.8, 4.3.0 -\u003e 4.3.6, 4.4.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "ISC"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "ISC would like to thank Felix Wilhelm, Google Security Team, for reporting this vulnerability."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a response containing a specially constructed options section. Affects ISC DHCP versions 4.1.0 -\u003e 4.1-ESV-R15, 4.2.0 -\u003e 4.2.8, 4.3.0 -\u003e 4.3.6, 4.4.0"
            }
          ]
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Affected versions of dhclient should crash due to an out-of-bounds memory access if they receive and process a triggering response packet. However, buffer overflow outcomes can vary by operating system, and outcomes such as remote code execution may be possible in some circumstances. Where they are present, operating system mitigation strategies such as address space layout randomization (ASLR) should make it difficult to leverage this vulnerability to achieve remote code execution, but we cannot rule it out as impossible. The safest course is to patch dhclient so that the buffer overflow cannot occur."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://kb.isc.org/docs/aa-01565",
              "refsource": "CONFIRM",
              "url": "https://kb.isc.org/docs/aa-01565"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "Upgrade to the patched release most closely related to your current version of DHCP. ISC DHCP releases are available from https://www.isc.org/downloads.\n\n \u003e=   DHCP 4.1-ESV-R15-P1\n \u003e=   DHCP 4.3.6-P1\n \u003e=   DHCP 4.4.1"
          }
        ],
        "source": {
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404fd4d2-a609-4245-b543-2c944a302a22",
    "assignerShortName": "isc",
    "cveId": "CVE-2018-5732",
    "datePublished": "2019-10-09T14:17:14.251Z",
    "dateReserved": "2018-01-17T00:00:00.000Z",
    "dateUpdated": "2024-09-16T18:19:36.136Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

usn-3586-1

Vulnerability from osv_ubuntu

Published

2018-03-01 17:47

Modified

2026-04-22 07:36

Summary

isc-dhcp vulnerabilities

Details

Konstantin Orekhov discovered that the DHCP server incorrectly handled a large number of concurrent TCP sessions. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-2774)

It was discovered that the DHCP server incorrectly handled socket descriptors. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2017-3144)

Felix Wilhelm discovered that the DHCP client incorrectly handled certain malformed responses. A remote attacker could use this issue to cause the DHCP client to crash, resulting in a denial of service, or possibly execute arbitrary code. In the default installation, attackers would be isolated by the dhclient AppArmor profile. (CVE-2018-5732)

Felix Wilhelm discovered that the DHCP server incorrectly handled reference counting. A remote attacker could possibly use this issue to cause the DHCP server to crash, resulting in a denial of service. (CVE-2018-5733)

References

URL

Type

	https://ubuntu.com/security/notices/USN-3586-1	ADVISORY
	https://ubuntu.com/security/CVE-2016-2774	REPORT
	https://ubuntu.com/security/CVE-2017-3144	REPORT
	https://ubuntu.com/security/CVE-2018-5732	REPORT
	https://ubuntu.com/security/CVE-2018-5733	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2016-2774",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3144",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5732",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5733",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "isc-dhcp-client",
            "binary_version": "4.2.4-7ubuntu12.12"
          },
          {
            "binary_name": "isc-dhcp-client-noddns",
            "binary_version": "4.2.4-7ubuntu12.12"
          },
          {
            "binary_name": "isc-dhcp-common",
            "binary_version": "4.2.4-7ubuntu12.12"
          },
          {
            "binary_name": "isc-dhcp-relay",
            "binary_version": "4.2.4-7ubuntu12.12"
          },
          {
            "binary_name": "isc-dhcp-server",
            "binary_version": "4.2.4-7ubuntu12.12"
          },
          {
            "binary_name": "isc-dhcp-server-ldap",
            "binary_version": "4.2.4-7ubuntu12.12"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "isc-dhcp",
        "purl": "pkg:deb/ubuntu/isc-dhcp@4.2.4-7ubuntu12.12?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.2.4-7ubuntu12.12"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.2.4-7ubuntu8",
        "4.2.4-7ubuntu9",
        "4.2.4-7ubuntu10",
        "4.2.4-7ubuntu11",
        "4.2.4-7ubuntu12",
        "4.2.4-7ubuntu12.1",
        "4.2.4-7ubuntu12.2",
        "4.2.4-7ubuntu12.3",
        "4.2.4-7ubuntu12.4",
        "4.2.4-7ubuntu12.5",
        "4.2.4-7ubuntu12.6",
        "4.2.4-7ubuntu12.7",
        "4.2.4-7ubuntu12.8",
        "4.2.4-7ubuntu12.9",
        "4.2.4-7ubuntu12.10"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2016-2774",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2017-3144",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5732",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5733",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "isc-dhcp-client",
            "binary_version": "4.3.3-5ubuntu12.9"
          },
          {
            "binary_name": "isc-dhcp-client-ddns",
            "binary_version": "4.3.3-5ubuntu12.9"
          },
          {
            "binary_name": "isc-dhcp-common",
            "binary_version": "4.3.3-5ubuntu12.9"
          },
          {
            "binary_name": "isc-dhcp-relay",
            "binary_version": "4.3.3-5ubuntu12.9"
          },
          {
            "binary_name": "isc-dhcp-server",
            "binary_version": "4.3.3-5ubuntu12.9"
          },
          {
            "binary_name": "isc-dhcp-server-ldap",
            "binary_version": "4.3.3-5ubuntu12.9"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "isc-dhcp",
        "purl": "pkg:deb/ubuntu/isc-dhcp@4.3.3-5ubuntu12.9?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.3.3-5ubuntu12.9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.3.1-5ubuntu3",
        "4.3.1-5ubuntu4",
        "4.3.1-5ubuntu5",
        "4.3.3-5ubuntu1",
        "4.3.3-5ubuntu2",
        "4.3.3-5ubuntu4",
        "4.3.3-5ubuntu5",
        "4.3.3-5ubuntu7",
        "4.3.3-5ubuntu8",
        "4.3.3-5ubuntu9",
        "4.3.3-5ubuntu10",
        "4.3.3-5ubuntu11",
        "4.3.3-5ubuntu12",
        "4.3.3-5ubuntu12.1",
        "4.3.3-5ubuntu12.3",
        "4.3.3-5ubuntu12.4",
        "4.3.3-5ubuntu12.6",
        "4.3.3-5ubuntu12.7"
      ]
    }
  ],
  "aliases": [],
  "details": "Konstantin Orekhov discovered that the DHCP server incorrectly handled a\nlarge number of concurrent TCP sessions. A remote attacker could possibly\nuse this issue to cause a denial of service. This issue only affected\nUbuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-2774)\n\nIt was discovered that the DHCP server incorrectly handled socket\ndescriptors. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2017-3144)\n\nFelix Wilhelm discovered that the DHCP client incorrectly handled certain\nmalformed responses. A remote attacker could use this issue to cause the\nDHCP client to crash, resulting in a denial of service, or possibly execute\narbitrary code. In the default installation, attackers would be isolated by\nthe dhclient AppArmor profile. (CVE-2018-5732)\n\nFelix Wilhelm discovered that the DHCP server incorrectly handled reference\ncounting. A remote attacker could possibly use this issue to cause the DHCP\nserver to crash, resulting in a denial of service. (CVE-2018-5733)\n",
  "id": "USN-3586-1",
  "modified": "2026-04-22T07:36:35Z",
  "published": "2018-03-01T17:47:25Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3586-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-2774"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-3144"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5732"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5733"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "isc-dhcp vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2016-2774",
    "UBUNTU-CVE-2017-3144",
    "UBUNTU-CVE-2018-5732",
    "UBUNTU-CVE-2018-5733"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

ubuntu-cve-2018-5732

Vulnerability from osv_ubuntu

CVE-2018-5732 (GCVE-0-2018-5732)

usn-3586-1

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature