Lucene search
Veracode Vulnerability DatabaseVERACODE:37449HistoryOct 09, 2022 - 7:16 p.m.
Denial Of Service (DoS)
2022-10-0919:16:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
26
denial of service
libdhcp.so
option_code_hash_lookup
add_option
refcount
application crash
malicious input
vulnerability
EPSS
0.001
Percentile
43.6%
libdhcp.so is vulnerable to Denial Of Service (DoS). The vulnerability exists when the function option_code_hash_lookup() is called from add_option() in option.c due to the option’s refcount field which allows an attacker to crash the application via malicious input.
Affected configurations
Node
-dhcp\Matchedge4.4.2_p1-r1
OR-dhcp\Matchedge4.4.2-r3
OR-dhcp\Matchedge4.4.2-r1
OR-dhcp\Matchedge4.4.2_p1-r0
OR-dhcp\Matchedge4.4.2-r0
OR-libdhcp.soMatch1.debug
OR-dhcp\Match3.134.4.2-r3
OR-dhcp\Match3.134.4.2_p1-r0
OR-dhcp\Match3.144.4.2-r3
OR-dhcp\Match3.144.4.2_p1-r0
OR-dhcp\Match3.154.4.2_p1-r1
OR-dhcp\Match3.154.4.2_p1-r0
OR-dhcpMatch4.1.1_53.p1.el6_9.1
OR-dhcpMatch4.2.5_68.el7.centos
OR-dhcpMatch4.1.1_12.p1.el6
OR-dhcpMatch4.1.1_60.p1.el6.centos
OR-dhcpMatch4.1.1_63.p1.el6_10
OR-dhcpMatch4.2.5_82.el7.centos
OR-dhcpMatch4.1.1_38.p1.el6
OR-dhcpMatch4.1.1_34.p1.el6
OR-dhcpMatch4.1.1_12.p1.el6_0.1
OR-dhcpMatch4.1.1_25.p1.el6_2.1
OR-dhcpMatch4.1.1_61.p1.el6_10
OR-dhcpMatch4.2.5_79.el7.centos
OR-dhcpMatch4.1.1_53.p1.el6
OR-dhcpMatch4.3.6_41.el8_3.1
OR-dhcpMatch4.1.1_12.p1.el6_0.4
OR-dhcpMatch4.1.1_51.p1.el6
OR-dhcpMatch4.1.1_31.p1.el6_3.1
OR-dhcpMatch4.1.1_53.p1.el6_9.4
OR-dhcpMatch4.1.1_31.p1.el6
OR-dhcpMatch4.1.1_53.p1.el6_9.3
OR-dhcpMatch4.1.1_43.p1.el6
OR-dhcpMatch4.2.5_83.el7.centos.1
OR-dhcpMatch4.1.1_12.p1.el6_0.2
OR-dhcpMatch4.1.1_60.p1.el6
OR-dhcpMatch4.2.5_58.el7_4.4
OR-dhcpMatch4.1.1_43.p1.el6_6.1
OR-dhcpMatch4.1.1_61.p1.el6.centos
OR-dhcpMatch4.1.1_19.p1.el6
OR-dhcpMatch4.1.1_25.p1.el6
OR-dhcpMatch4.1.1_49.p1.el6
OR-dhcpMatch4.1.1_19.p1.el6_1.1
OR-dhcpMatch4.1.1_34.p1.el6_4.1
OR-dhcpMatch4.2.5_77.el7.centos
OR-dhcpMatch4.2.5_68.el7.centos.1
OR-dhcpMatch4.1.1_63.p1.el6.centos
OR-dhcp\Matchedge4.4.2_p1-r1
OR-dhcp\Matchedge4.4.2-r3
OR-dhcp\Matchedge4.4.2-r1
OR-dhcp\Matchedge4.4.2_p1-r0
OR-dhcp\Matchedge4.4.2-r0
OR-libdhcp.soMatch1.debug
OR-dhcp\Match3.134.4.2-r3
OR-dhcp\Match3.134.4.2_p1-r0
OR-dhcp\Match3.144.4.2-r3
OR-dhcp\Match3.144.4.2_p1-r0
OR-dhcp\Match3.154.4.2_p1-r1
OR-dhcp\Match3.154.4.2_p1-r0
OR-dhcpMatch4.1.1_53.p1.el6_9.1
OR-dhcpMatch4.2.5_68.el7.centos
OR-dhcpMatch4.1.1_12.p1.el6
OR-dhcpMatch4.1.1_60.p1.el6.centos
OR-dhcpMatch4.1.1_63.p1.el6_10
OR-dhcpMatch4.2.5_82.el7.centos
OR-dhcpMatch4.1.1_38.p1.el6
OR-dhcpMatch4.1.1_34.p1.el6
OR-dhcpMatch4.1.1_12.p1.el6_0.1
OR-dhcpMatch4.1.1_25.p1.el6_2.1
OR-dhcpMatch4.1.1_61.p1.el6_10
OR-dhcpMatch4.2.5_79.el7.centos
OR-dhcpMatch4.1.1_53.p1.el6
OR-dhcpMatch4.3.6_41.el8_3.1
OR-dhcpMatch4.1.1_12.p1.el6_0.4
OR-dhcpMatch4.1.1_51.p1.el6
OR-dhcpMatch4.1.1_31.p1.el6_3.1
OR-dhcpMatch4.1.1_53.p1.el6_9.4
OR-dhcpMatch4.1.1_31.p1.el6
OR-dhcpMatch4.1.1_53.p1.el6_9.3
OR-dhcpMatch4.1.1_43.p1.el6
OR-dhcpMatch4.2.5_83.el7.centos.1
OR-dhcpMatch4.1.1_12.p1.el6_0.2
OR-dhcpMatch4.1.1_60.p1.el6
OR-dhcpMatch4.2.5_58.el7_4.4
OR-dhcpMatch4.1.1_43.p1.el6_6.1
OR-dhcpMatch4.1.1_61.p1.el6.centos
OR-dhcpMatch4.1.1_19.p1.el6
OR-dhcpMatch4.1.1_25.p1.el6
OR-dhcpMatch4.1.1_49.p1.el6
OR-dhcpMatch4.1.1_19.p1.el6_1.1
OR-dhcpMatch4.1.1_34.p1.el6_4.1
OR-dhcpMatch4.2.5_77.el7.centos
OR-dhcpMatch4.2.5_68.el7.centos.1
OR-dhcpMatch4.1.1_63.p1.el6.centos
| Vendor | Product | Version | CPE |
|---|---|---|---|
| - | dhcp\ | edge | cpe:2.3:a:-:dhcp\:edge:4.4.2_p1-r1:*:*:*:*:*:*:* |
| - | dhcp\ | edge | cpe:2.3:a:-:dhcp\:edge:4.4.2-r3:*:*:*:*:*:*:* |
| - | dhcp\ | edge | cpe:2.3:a:-:dhcp\:edge:4.4.2-r1:*:*:*:*:*:*:* |
| - | dhcp\ | edge | cpe:2.3:a:-:dhcp\:edge:4.4.2_p1-r0:*:*:*:*:*:*:* |
| - | dhcp\ | edge | cpe:2.3:a:-:dhcp\:edge:4.4.2-r0:*:*:*:*:*:*:* |
| - | libdhcp.so | 1.debug | cpe:2.3:a:-:libdhcp.so:1.debug:*:*:*:*:*:*:* |
| - | dhcp\ | 3.13 | cpe:2.3:a:-:dhcp\:3.13:4.4.2-r3:*:*:*:*:*:*:* |
| - | dhcp\ | 3.13 | cpe:2.3:a:-:dhcp\:3.13:4.4.2_p1-r0:*:*:*:*:*:*:* |
| - | dhcp\ | 3.14 | cpe:2.3:a:-:dhcp\:3.14:4.4.2-r3:*:*:*:*:*:*:* |
| - | dhcp\ | 3.14 | cpe:2.3:a:-:dhcp\:3.14:4.4.2_p1-r0:*:*:*:*:*:*:* |
References
github.com/advisories/GHSA-5fp7-mmwq-gvmw
github.com/isc-projects/dhcp/blob/master/common/options.c#L4433
kb.isc.org/docs/cve-2022-2928
lists.debian.org/debian-lts-announce/2022/10/msg00015.html
lists.fedoraproject.org/archives/list/[email protected]/message/2SARIK7KZ7MGQIWDRWZFAOSQSPXY4GOU/
lists.fedoraproject.org/archives/list/[email protected]/message/QQXYCIWUDILRCNBAIMVFCSGXBRKEPB4K/
lists.fedoraproject.org/archives/list/[email protected]/message/T6IBFH4MRRNJQVWEKILQ6I6CXWW766FX/
secdb.alpinelinux.org/edge/main.yaml
secdb.alpinelinux.org/v3.16/main.yaml
security.gentoo.org/glsa/202305-22
www.cve.org/CVERecord?id=CVE-2022-2928
Related
cnvd
cnvd
ISC DHCP Denial of Service Vulnerability
2022-10-11 00:00:00
prion
prion
Code injection
2022-10-07 05:15:00
cve
cve
CVE-2022-2928
2022-10-07 05:15:08
debiancve
debiancve
CVE-2022-2928
2022-10-07 05:15:08
osv
osv
CVE-2022-2928
2022-10-07 05:15:08
Moderate: dhcp security and bug fix update
2023-05-16 00:00:00
isc-dhcp vulnerabilities
2022-10-05 16:45:48
ubuntucve
ubuntucve
CVE-2022-2928
2022-10-05 00:00:00
nvd
nvd
CVE-2022-2928
2022-10-07 05:15:08
redhatcve
redhatcve
CVE-2022-2928
2022-10-05 14:57:20
cbl_mariner
cbl_mariner
CVE-2022-2928 affecting package dhcp 4.4.3-3
2024-12-02 15:13:59
CVE-2022-2928 affecting package dhcp 4.4.2-3
2024-12-02 15:13:53
CVE-2022-2928 affecting package dhcp for versions less than 4.4.3.P1-1
2024-04-17 22:02:46
cvelist
cvelist
CVE-2022-2928 An option refcount overflow exists in dhcpd
2022-10-07 04:45:11
alpinelinux
alpinelinux
CVE-2022-2928
2022-10-07 05:15:08
nessus
nessus
AlmaLinux 9 : dhcp (ALSA-2023:2502)
2023-05-14 00:00:00
EulerOS 2.0 SP8 : dhcp (EulerOS-SA-2022-2792)
2022-12-08 00:00:00
AlmaLinux 8 : dhcp (ALSA-2023:3000)
2023-05-21 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:3992-1)
2022-11-16 00:00:00
Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2023-2209)
2023-06-12 00:00:00
Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2023-1121)
2023-01-09 00:00:00
mageia
mageia
Updated dhcp packages fix security vulnerability
2022-10-19 02:14:56
amazon
amazon
Medium: dhcp
2022-10-31 19:40:00
redhat
redhat
(RHSA-2023:3000) Moderate: dhcp security and bug fix update
2023-05-16 06:00:25
(RHSA-2023:2502) Moderate: dhcp security and enhancement update
2023-05-09 05:12:51
almalinux
almalinux
Moderate: dhcp security and enhancement update
2023-05-09 00:00:00
Moderate: dhcp security and bug fix update
2023-05-16 00:00:00
oraclelinux
oraclelinux
dhcp security and enhancement update
2023-05-15 00:00:00
dhcp security and bug fix update
2023-05-24 00:00:00
debian
debian
[SECURITY] [DSA 5251-1] isc-dhcp security update
2022-10-06 19:02:22
[SECURITY] [DLA 3146-1] isc-dhcp security update
2022-10-10 23:44:21
fedora
fedora
[SECURITY] Fedora 35 Update: dhcp-4.4.3-4.P1.fc35
2022-10-26 17:35:20
[SECURITY] Fedora 37 Update: dhcp-4.4.3-4.P1.fc37
2022-10-17 22:55:45
[SECURITY] Fedora 36 Update: dhcp-4.4.3-4.P1.fc36
2022-10-14 13:03:27
ibm
ibm
f5
f5
K41133903 : ISC DHCP vulnerabilities CVE-2022-2928 CVE-2022-2929
2022-11-07 00:00:00
ubuntu
ubuntu
DHCP vulnerabilities
2022-10-05 00:00:00
DHCP vulnerabilities
2022-11-07 00:00:00
DHCP vulnerabilities
2022-11-21 00:00:00
slackware
slackware
[slackware-security] dhcp
2022-10-05 19:04:05
photon
photon
Moderate Photon OS Security Update - PHSA-2022-0259
2022-10-06 00:00:00
Moderate Photon OS Security Update - PHSA-2022-4.0-0259
2022-10-06 00:00:00
Moderate Photon OS Security Update - PHSA-2023-5.0-0100
2023-09-26 00:00:00
cloudfoundry
cloudfoundry
USN-5658-1: DHCP vulnerabilities | Cloud Foundry
2022-12-07 00:00:00
gentoo
gentoo
ISC DHCP: Multiple Vulnerabilities
2023-05-03 00:00:00
avleonov
avleonov