CVE-2016-2774
- Source
- https://cve.org/CVERecord?id=CVE-2016-2774
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2774.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2016-2774
- Downstream
- Related
- Published
- 2016-03-09T15:59:00.147Z
- Modified
- 2026-07-08T05:48:53.988862840Z
- Severity
-
- 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to cause a denial of service (INSIST assertion failure or request-processing outage) by establishing many sessions.
- Database specific
{ "unresolved_ranges": [ { "extracted_events": [ { "introduced": "14.04" }, { "last_affected": "14.04" }, { "introduced": "16.04" }, { "last_affected": "16.04" }, { "introduced": "17.10" }, { "last_affected": "17.10" } ], "source": "CPE_STRING", "vendor_product": "canonical:ubuntu_linux", "cpes": [ "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*" ] }, { "cpes": [ "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*" ], "source": "CPE_STRING", "vendor_product": "debian:debian_linux", "extracted_events": [ { "introduced": "8.0" }, { "last_affected": "8.0" } ] }, { "extracted_events": [ { "introduced": "4.1-esv-rc1" }, { "last_affected": "4.1-esv-rc1" } ], "source": "CPE_STRING", "vendor_product": "isc:dhcp", "cpes": [ "cpe:2.3:a:isc:dhcp:4.1-esv:rc1:*:*:*:*:*:*" ] } ] }- References
-
- http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183458.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183640.html
- http://lists.opensuse.org/opensuse-updates/2016-07/msg00066.html
- http://rhn.redhat.com/errata/RHSA-2016-2590.html
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
- http://www.securityfocus.com/bid/84208
- http://www.securitytracker.com/id/1035196
- https://kb.isc.org/article/AA-01354
- https://lists.debian.org/debian-lts-announce/2019/11/msg00023.html
- https://usn.ubuntu.com/3586-1/
Affected packages
Git / gitlab.isc.org/isc-projects/dhcp
Affected ranges
- Type
- GIT
- Repo
- https://gitlab.isc.org/isc-projects/dhcp
- Events
-
IntroducedLast affected
- Database specific
{ "source": "CPE_STRING", "cpe": [ "cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1.1:-:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r10:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r10_b1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r11_b1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc2:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r12:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r12_b1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1.2:-:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r7:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r8:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r8_b1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r8_rc1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r9:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r9_b1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1-esv:r9_rc1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1.0:-:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1.0:a1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1.0:b1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1.0:a2:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1.1:b1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1.1:p1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1.1:b2:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1.1:b3:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1.1:rc1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1.2:b1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1.2:p1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.1.2:rc1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.0:-:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.0:a1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.0:b1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.0:p1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.0:a2:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.0:b2:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.0:p2:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.0:rc1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.1:-:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.1:b1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.1:p1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.1:rc1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.2:-:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.2:b1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.2:rc1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.3:-:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.3:p1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.3:p2:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.4:-:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.4:b1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.4:p1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.4:p2:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.4:rc1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.4:rc2:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.5:-:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.5:b1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.5:p1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.5:rc1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.6:-:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.6:b1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.6:rc1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.7:-:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.7:b1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.7:rc1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.8:-:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.8:b1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.8:rc1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.2.8:rc2:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.3.0:-:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.3.0:a1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.3.0:b1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.3.0:rc1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.3.1:-:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.3.1:b1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.3.1:rc1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.3.2:-:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.3.2:b1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.3.2:rc1:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.3.2:rc2:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.3.3:-:*:*:*:*:*:*", "cpe:2.3:a:isc:dhcp:4.3.3:b1:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "4.1-esv-NA" }, { "last_affected": "4.1-esv-NA" }, { "introduced": "4.1-esv-r1" }, { "last_affected": "4.1-esv-r1" }, { "introduced": "4.1.1-NA" }, { "last_affected": "4.1.1-NA" }, { "introduced": "4.1-esv-r10" }, { "last_affected": "4.1-esv-r10" }, { "introduced": "4.1-esv-r10_b1" }, { "last_affected": "4.1-esv-r10_b1" }, { "introduced": "4.1-esv-r11_b1" }, { "last_affected": "4.1-esv-r11_b1" }, { "introduced": "4.1-esv-r11_rc1" }, { "last_affected": "4.1-esv-r11_rc1" }, { "introduced": "4.1-esv-r11_rc2" }, { "last_affected": "4.1-esv-r11_rc2" }, { "introduced": "4.1-esv-r12" }, { "last_affected": "4.1-esv-r12" }, { "introduced": "4.1-esv-r12_b1" }, { "last_affected": "4.1-esv-r12_b1" }, { "introduced": "4.1-esv-r2" }, { "last_affected": "4.1-esv-r2" }, { "introduced": "4.1.2-NA" }, { "last_affected": "4.1.2-NA" }, { "introduced": "4.1-esv-r3" }, { "last_affected": "4.1-esv-r3" }, { "introduced": "4.1-esv-r3_b1" }, { "last_affected": "4.1-esv-r3_b1" }, { "introduced": "4.1-esv-r4" }, { "last_affected": "4.1-esv-r4" }, { "introduced": "4.1-esv-r5" }, { "last_affected": "4.1-esv-r5" }, { "introduced": "4.1-esv-r5_b1" }, { "last_affected": "4.1-esv-r5_b1" }, { "introduced": "4.1-esv-r5_rc1" }, { "last_affected": "4.1-esv-r5_rc1" }, { "introduced": "4.1-esv-r5_rc2" }, { "last_affected": "4.1-esv-r5_rc2" }, { "introduced": "4.1-esv-r6" }, { "last_affected": "4.1-esv-r6" }, { "introduced": "4.1-esv-r7" }, { "last_affected": "4.1-esv-r7" }, { "introduced": "4.1-esv-r8" }, { "last_affected": "4.1-esv-r8" }, { "introduced": "4.1-esv-r8_b1" }, { "last_affected": "4.1-esv-r8_b1" }, { "introduced": "4.1-esv-r8_rc1" }, { "last_affected": "4.1-esv-r8_rc1" }, { "introduced": "4.1-esv-r9" }, { "last_affected": "4.1-esv-r9" }, { "introduced": "4.1-esv-r9_b1" }, { "last_affected": "4.1-esv-r9_b1" }, { "introduced": "4.1-esv-r9_rc1" }, { "last_affected": "4.1-esv-r9_rc1" }, { "introduced": "4.1.0-NA" }, { "last_affected": "4.1.0-NA" }, { "introduced": "4.1.0-a1" }, { "last_affected": "4.1.0-a1" }, { "introduced": "4.1.0-b1" }, { "last_affected": "4.1.0-b1" }, { "introduced": "4.1.0-a2" }, { "last_affected": "4.1.0-a2" }, { "introduced": "4.1.1-b1" }, { "last_affected": "4.1.1-b1" }, { "introduced": "4.1.1-p1" }, { "last_affected": "4.1.1-p1" }, { "introduced": "4.1.1-b2" }, { "last_affected": "4.1.1-b2" }, { "introduced": "4.1.1-b3" }, { "last_affected": "4.1.1-b3" }, { "introduced": "4.1.1-rc1" }, { "last_affected": "4.1.1-rc1" }, { "introduced": "4.1.2-b1" }, { "last_affected": "4.1.2-b1" }, { "introduced": "4.1.2-p1" }, { "last_affected": "4.1.2-p1" }, { "introduced": "4.1.2-rc1" }, { "last_affected": "4.1.2-rc1" }, { "introduced": "4.2.0-NA" }, { "last_affected": "4.2.0-NA" }, { "introduced": "4.2.0-a1" }, { "last_affected": "4.2.0-a1" }, { "introduced": "4.2.0-b1" }, { "last_affected": "4.2.0-b1" }, { "introduced": "4.2.0-p1" }, { "last_affected": "4.2.0-p1" }, { "introduced": "4.2.0-a2" }, { "last_affected": "4.2.0-a2" }, { "introduced": "4.2.0-b2" }, { "last_affected": "4.2.0-b2" }, { "introduced": "4.2.0-p2" }, { "last_affected": "4.2.0-p2" }, { "introduced": "4.2.0-rc1" }, { "last_affected": "4.2.0-rc1" }, { "introduced": "4.2.1-NA" }, { "last_affected": "4.2.1-NA" }, { "introduced": "4.2.1-b1" }, { "last_affected": "4.2.1-b1" }, { "introduced": "4.2.1-p1" }, { "last_affected": "4.2.1-p1" }, { "introduced": "4.2.1-rc1" }, { "last_affected": "4.2.1-rc1" }, { "introduced": "4.2.2-NA" }, { "last_affected": "4.2.2-NA" }, { "introduced": "4.2.2-b1" }, { "last_affected": "4.2.2-b1" }, { "introduced": "4.2.2-rc1" }, { "last_affected": "4.2.2-rc1" }, { "introduced": "4.2.3-NA" }, { "last_affected": "4.2.3-NA" }, { "introduced": "4.2.3-p1" }, { "last_affected": "4.2.3-p1" }, { "introduced": "4.2.3-p2" }, { "last_affected": "4.2.3-p2" }, { "introduced": "4.2.4-NA" }, { "last_affected": "4.2.4-NA" }, { "introduced": "4.2.4-b1" }, { "last_affected": "4.2.4-b1" }, { "introduced": "4.2.4-p1" }, { "last_affected": "4.2.4-p1" }, { "introduced": "4.2.4-p2" }, { "last_affected": "4.2.4-p2" }, { "introduced": "4.2.4-rc1" }, { "last_affected": "4.2.4-rc1" }, { "introduced": "4.2.4-rc2" }, { "last_affected": "4.2.4-rc2" }, { "introduced": "4.2.5-NA" }, { "last_affected": "4.2.5-NA" }, { "introduced": "4.2.5-b1" }, { "last_affected": "4.2.5-b1" }, { "introduced": "4.2.5-p1" }, { "last_affected": "4.2.5-p1" }, { "introduced": "4.2.5-rc1" }, { "last_affected": "4.2.5-rc1" }, { "introduced": "4.2.6-NA" }, { "last_affected": "4.2.6-NA" }, { "introduced": "4.2.6-b1" }, { "last_affected": "4.2.6-b1" }, { "introduced": "4.2.6-rc1" }, { "last_affected": "4.2.6-rc1" }, { "introduced": "4.2.7-NA" }, { "last_affected": "4.2.7-NA" }, { "introduced": "4.2.7-b1" }, { "last_affected": "4.2.7-b1" }, { "introduced": "4.2.7-rc1" }, { "last_affected": "4.2.7-rc1" }, { "introduced": "4.2.8-NA" }, { "last_affected": "4.2.8-NA" }, { "introduced": "4.2.8-b1" }, { "last_affected": "4.2.8-b1" }, { "introduced": "4.2.8-rc1" }, { "last_affected": "4.2.8-rc1" }, { "introduced": "4.2.8-rc2" }, { "last_affected": "4.2.8-rc2" }, { "introduced": "4.3.0-NA" }, { "last_affected": "4.3.0-NA" }, { "introduced": "4.3.0-a1" }, { "last_affected": "4.3.0-a1" }, { "introduced": "4.3.0-b1" }, { "last_affected": "4.3.0-b1" }, { "introduced": "4.3.0-rc1" }, { "last_affected": "4.3.0-rc1" }, { "introduced": "4.3.1-NA" }, { "last_affected": "4.3.1-NA" }, { "introduced": "4.3.1-b1" }, { "last_affected": "4.3.1-b1" }, { "introduced": "4.3.1-rc1" }, { "last_affected": "4.3.1-rc1" }, { "introduced": "4.3.2-NA" }, { "last_affected": "4.3.2-NA" }, { "introduced": "4.3.2-b1" }, { "last_affected": "4.3.2-b1" }, { "introduced": "4.3.2-rc1" }, { "last_affected": "4.3.2-rc1" }, { "introduced": "4.3.2-rc2" }, { "last_affected": "4.3.2-rc2" }, { "introduced": "4.3.3-NA" }, { "last_affected": "4.3.3-NA" }, { "introduced": "4.3.3-b1" }, { "last_affected": "4.3.3-b1" } ] }
Affected versions
4.*
4.1-esv-NA
4.1-esv-r1
4.1-esv-r10
4.1-esv-r10_b1
4.1-esv-r11_b1
4.1-esv-r11_rc1
4.1-esv-r11_rc2
4.1-esv-r12
4.1-esv-r12_b1
4.1-esv-r2
4.1-esv-r3
4.1-esv-r3_b1
4.1-esv-r4
4.1-esv-r5
4.1-esv-r5_b1
4.1-esv-r5_rc1
4.1-esv-r5_rc2
4.1-esv-r6
4.1-esv-r7
4.1-esv-r8
4.1-esv-r8_b1
4.1-esv-r8_rc1
4.1-esv-r9
4.1-esv-r9_b1
4.1-esv-r9_rc1
4.1.0-NA
4.1.0-a1
4.1.0-a2
4.1.1-b1
4.1.1-b2
4.1.1-b3
4.1.1-rc1
4.1.2-b1
4.1.2-rc1
4.2.0-NA
4.2.0-a1
4.2.0-a2
4.2.0-rc1
4.2.1-NA
4.2.1-b1
4.2.1-rc1
4.2.2-NA
4.2.2-b1
4.2.2-rc1
4.2.3-NA
4.2.3-p1
4.2.3-p2
4.2.4-NA
4.2.4-b1
4.2.4-p2
4.2.4-rc1
4.2.4-rc2
4.2.5-NA
4.2.5-b1
4.2.5-rc1
4.2.6-NA
4.2.6-b1
4.2.6-rc1
4.2.7-NA
4.2.7-b1
4.2.7-rc1
4.2.8-NA
4.2.8-b1
4.2.8-rc1
4.2.8-rc2
4.3.0-NA
4.3.0-a1
4.3.0-rc1
4.3.1-NA
4.3.1-b1
4.3.1-rc1
4.3.2-NA
4.3.2-b1
4.3.2-rc1
4.3.2-rc2
4.3.3-NA
4.3.3-b1