Advisory ROSA-SA-2021-1822

🗓️ 02 Jul 2021 16:37:55Reported by ROSA LABType

Advisory ROSA-SA-2021-1822 describes multiple vulnerabilities in ISC DHCP 4.2.5 on Cobalt 7.9, including remote denial of service attacks and socket descriptor exhaustion

Reporter	Title	Published	Views	Family All 161
FreeBSD	isc-dhcpd -- Denial of Service	5 Jan 201600:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerabilities in dhcp	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is affected by DHCP vulnerabilities (CVE-2015-8605 and CVE-2016-2774).	18 Dec 201914:26	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cracklib, dhcp, expat, libgcrypt and lighttpd affect IBM Flex System Chassis Management Module (CMM)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in cURL, DHCP and GNU C Library	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in DHCP affect Power Hardware Management Console (‪CVE-2015-8605 and CVE-2016-2774‬‬)	23 Sep 202101:31	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in DHCP affects PowerKVM	18 Jun 201801:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by a vulnerability in dhcp (CVE-2017-3144)	26 Jul 201820:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by a vulnerabilty in dhcp (CVE-2017-3144)	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in DHCP affects IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter systems	14 Apr 202314:32	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Cobalt	any	noarch	dhcp	4.2.5	UNKNOWN

02 Jul 2021 16:37Current

7.2High risk

Vulners AI Score7.2

CVSS 25.7

CVSS 35.3 - 6.5

CVSS 3.17.5

EPSS0.7645