CVE-2018-5732 A specially constructed response from a malicious server can cause a buffer overflow in dhclient

🗓️ 09 Oct 2019 14:17:14Reported by iscType

Buffer overflow in dhclient due to unbounded buffer for processing DHCP option

Reporter	Title	Published	Views	Family All 123
IBM Security Bulletins	Security Bulletin: Vulnerability in DHCP affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (CVE-2018-5732)	29 Mar 202301:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in cURL, DHCP and GNU C Library	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is affected by DHCP vulnerabilities CVE-2018-5732 and CVE-2018-5733.	18 Dec 201914:26	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in DHCP affect PowerKVM	18 Jun 201801:42	–	ibm
IBM Security Bulletins	Security Bulletin: ISC DHCP vulnerability affects TS4500 Tape Library (CVE-2018-5732)	18 Jun 201800:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabilities in dhcp (CVE-2018-5732 CVE-2018-5733)	30 Jul 201822:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilties in dhcp (CVE-2018-5732, CVE-2018-5733)	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a Using Components with Known Vulnerabilities (DHCP) vulnerability	6 May 201916:30	–	ibm
IBM Security Bulletins	Security Bulletin: This Power System firmware update is being released to address DHCP issue number CVE-2018-5732	7 Dec 202119:14	–	ibm
Tenable Nessus	Amazon Linux 2 : dhcp (ALAS-2018-984)	18 Apr 201800:00	–	nessus

[
  {
    "product": "ISC DHCP",
    "vendor": "ISC",
    "versions": [
      {
        "status": "affected",
        "version": "ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0"
      }
    ]
  }
]

Source	Link
kb	www.kb.isc.org/docs/aa-01565

09 Oct 2019 14:17Current

7.8High risk

Vulners AI Score7.8

CVSS 37.5

EPSS0.0496