CVE-2018-5733

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2018-5733
A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://www.securityfocus.com/bid/103188 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1040437 Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2018:0469 Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0483 Third Party Advisory
https://kb.isc.org/docs/aa-01567 Vendor Advisory
https://lists.debian.org/debian-lts-announce/2018/03/msg00015.html Third Party Advisory
https://usn.ubuntu.com/3586-1/ Third Party Advisory
https://usn.ubuntu.com/3586-2/ Third Party Advisory
https://www.debian.org/security/2018/dsa-4133 Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r10:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r10_b1:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r10_rc1:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r11:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r11_b1:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc1:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc2:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r12:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r12_b1:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r12_p1:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r13:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r13_b1:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r14:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r14_b1:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r15:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r7:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r8:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r8_b1:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r8_rc1:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r9:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r9_b1:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:r9_rc1:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1-esv:rc1:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.1.0:-:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:4.4.0:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
History

No history.

Information

Published : 2019-01-16 20:29

Updated : 2023-12-10 12:44

NVD link : CVE-2018-5733

Mitre link : CVE-2018-5733

CVE.ORG link : CVE-2018-5733

JSON object : View

Products Affected

redhat

  • enterprise_linux_server_eus
  • enterprise_linux_workstation
  • enterprise_linux_server
  • enterprise_linux_server_aus
  • enterprise_linux_desktop

canonical

  • ubuntu_linux

isc

  • dhcp

debian

  • debian_linux
CWE
CWE-190

Integer Overflow or Wraparound