CVE-2018-5732

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-5732
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-5732.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-5732
Downstream
Related
Published
2019-10-09T16:15:13.407Z
Modified
2026-03-10T14:44:24.782008Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a response containing a specially constructed options section. Affects ISC DHCP versions 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0

References

Affected packages

Git / gitlab.isc.org/isc-projects/dhcp

Affected ranges

Type
GIT
Repo
https://gitlab.isc.org/isc-projects/dhcp
Events
Introduced
2a4ff20abc29fe2647de68e6a6eea8e49e6ce941
Last affected
9ff9a4e8131e7b5f144050b538ff866f89c98ffc
Introduced
079f747eb20d40e80c65e8a984d6c50860560b3c
Fixed
8541c4fcbc6364800775234bacfe646ef16bfd38
Introduced
5de62c8b34a94e66269b39c663cd222047216306
Fixed
c1bd79a15e9b689e8a18538aaedec0ab8bd04b17
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b39dd193dc3d189d3669866d73a87172545e2a4b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9f35323a8abe2ed4bc567b2b2613fc3ef9254e8f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2d5ca865b7268d2f60a485c9a50f96b7890dd51f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c4a3c3ee213715ff5a3f6255001148e333029741
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f10f02aa92b38606897523e19ad090fc0464a955
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a05db3d943208ab168a9aba9117706bb58baea7c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
dda169525b6109935c76d2a7f0c479ff4fda0e82
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4f5c8255511e3600288eddfa6a4e594fde107458
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2a00efe8700df8bfd11881fdabeb18f33e8d9fe6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
331193dd54344dc74ca1987797d99bb57ba277fe
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
240d9b62e137cad28a08893326ab66d4cd7bbb89
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
240d9b62e137cad28a08893326ab66d4cd7bbb89
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f0bd8bdff79188c900a31e763377eb1d25e80eb0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3a1078b6d1292305c9e784cdce97d9ae6934cc01
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3709b7fc844ab8384ba40a1be3cf7916168423e1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
54ec15cba2c5157bedf45cae9d062814e75e928e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8423b4587ea3eef2a55b9ab693c828d46e238f0a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9ff9a4e8131e7b5f144050b538ff866f89c98ffc
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a43c1faf96b8647d2a87fc0b5ef044c79cc1c852
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d6f132e4523d4a317f18a395ade0c4927867bc67
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f9eeba56095a43b985292025a2b4a46085cff2ea
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a185640cf1d8fd71b5c62ac4b4c9572996248b63
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b54c35c0c840395bc1e62dd8484eab610837d01a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f615b2d9be5ebe1762de0677a1e5c151519217aa
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
703432ad969076f6a4eb9566db5634cceeb12572
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5e1ef01178527149e5673002dbdc3be18046c77e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b8ee38f1a50299e35c37a0eeadce30051dda7696
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
db3e58c1515b19d6fb4f1aa46445cbbcb4261e65
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
192a3579019c9f0c4095371d783c22efd74ba9bf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
034fe1d0edc30d6912718cb547f12b8c215b4cf2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c57dbea3ca687b929a7bf8171c21ad9dc66461bf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
847b32280a9d52c3f30db4dc2ed620abbeda708c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b5672a6ffffad5c2455e5d50e4c2e5ef1e99f925
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bb082e7460a5a56cd9f548b00dee88489b7f8ff6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
075a2f45da9a3194c9ea2c72b2167d9bb5bd0c21
Database specific 
{
    "versions": [
        {
            "introduced": "4.1.0"
        },
        {
            "last_affected": "4.1.2"
        },
        {
            "introduced": "4.2.0"
        },
        {
            "fixed": "4.2.8"
        },
        {
            "introduced": "4.3.0"
        },
        {
            "fixed": "4.3.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r10b1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r10rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r11b1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r11rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r11rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r12\\-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r12b1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r13b1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r14b1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r15"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r3b1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r5b1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r5rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r5rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r8b1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r8rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r9b1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1-esv-r9rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.2-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.4.0"
        }
    ]
}

Affected versions

Other
v4_1_esv_r0
v4_1_esv_r1
v4_1_esv_r2
v4_3_0
v4_3_1
v4_3_1b1
v4_3_1rc1
v4_3_2
v4_3_2b1
v4_3_2rc1
v4_3_2rc2
v4_3_3
v4_3_3b1
v4_3_4
v4_3_4b1
v4_4_0
v4_4_0b1_f1
v4_3_2.*
v4_3_2.pre-beta

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-5732.json"