CVE-2022-2928

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-2928
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-2928.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-2928
Related
Published
2022-10-07T05:15:08Z
Modified
2024-10-25T23:54:02.447228Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

In ISC DHCP 4.4.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1, when the function optioncodehashlookup() is called from addoption(), it increases the option's refcount field. However, there is not a corresponding call to optiondereference() to decrement the refcount field. The function addoption() is only used in server responses to lease query packets. Each lease query response calls this function for several options, so eventually, the reference counters could overflow and cause the server to abort.

References

Affected packages

Alpine:v3.13 / dhcp

Package

Name
dhcp
Purl
pkg:apk/alpine/dhcp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.3_p1-r0

Affected versions

4.*

4.1.0-r0
4.1.0_p1-r0
4.1.0_p1-r1
4.1.0_p1-r2
4.1.0_p1-r3
4.1.0_p1-r4
4.1.0_p1-r5
4.1.0_p1-r6
4.1.0_p1-r7
4.1.0_p1-r8
4.1.0_p1-r9
4.1.0_p1-r10
4.1.1_p1-r0
4.1.1_p1-r1
4.2.0-r0
4.2.0_p1-r0
4.2.0_p2-r0
4.2.1-r0
4.2.1_p1-r0
4.2.1_p1-r1
4.2.2-r0
4.2.3-r0
4.2.3_p1-r0
4.2.3_p2-r0
4.2.3_p2-r1
4.2.4-r0
4.2.4_p1-r0
4.2.4_p1-r1
4.2.4_p2-r0
4.2.5-r0
4.2.5_p1-r0
4.2.5_p1-r1
4.2.5_p1-r2
4.3.0-r0
4.3.0-r1
4.3.1-r0
4.3.1-r1
4.3.2-r0
4.3.3-r0
4.3.3_p1-r0
4.3.4-r0
4.3.4-r1
4.3.4-r2
4.3.4-r3
4.3.5-r0
4.4.1-r0
4.4.1-r1
4.4.1-r2
4.4.1-r3
4.4.1-r4
4.4.1-r5
4.4.1-r6
4.4.1-r7
4.4.2-r0
4.4.2-r1
4.4.2-r2
4.4.2-r3
4.4.2_p1-r0

Alpine:v3.14 / dhcp

Package

Name
dhcp
Purl
pkg:apk/alpine/dhcp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.3_p1-r0

Affected versions

4.*

4.1.0-r0
4.1.0_p1-r0
4.1.0_p1-r1
4.1.0_p1-r2
4.1.0_p1-r3
4.1.0_p1-r4
4.1.0_p1-r5
4.1.0_p1-r6
4.1.0_p1-r7
4.1.0_p1-r8
4.1.0_p1-r9
4.1.0_p1-r10
4.1.1_p1-r0
4.1.1_p1-r1
4.2.0-r0
4.2.0_p1-r0
4.2.0_p2-r0
4.2.1-r0
4.2.1_p1-r0
4.2.1_p1-r1
4.2.2-r0
4.2.3-r0
4.2.3_p1-r0
4.2.3_p2-r0
4.2.3_p2-r1
4.2.4-r0
4.2.4_p1-r0
4.2.4_p1-r1
4.2.4_p2-r0
4.2.5-r0
4.2.5_p1-r0
4.2.5_p1-r1
4.2.5_p1-r2
4.3.0-r0
4.3.0-r1
4.3.1-r0
4.3.1-r1
4.3.2-r0
4.3.3-r0
4.3.3_p1-r0
4.3.4-r0
4.3.4-r1
4.3.4-r2
4.3.4-r3
4.3.5-r0
4.4.1-r0
4.4.1-r1
4.4.1-r2
4.4.1-r3
4.4.1-r4
4.4.1-r5
4.4.1-r6
4.4.1-r7
4.4.2-r0
4.4.2-r1
4.4.2-r2
4.4.2-r3
4.4.2_p1-r0

Alpine:v3.15 / dhcp

Package

Name
dhcp
Purl
pkg:apk/alpine/dhcp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.3_p1-r0

Affected versions

4.*

4.1.0-r0
4.1.0_p1-r0
4.1.0_p1-r1
4.1.0_p1-r2
4.1.0_p1-r3
4.1.0_p1-r4
4.1.0_p1-r5
4.1.0_p1-r6
4.1.0_p1-r7
4.1.0_p1-r8
4.1.0_p1-r9
4.1.0_p1-r10
4.1.1_p1-r0
4.1.1_p1-r1
4.2.0-r0
4.2.0_p1-r0
4.2.0_p2-r0
4.2.1-r0
4.2.1_p1-r0
4.2.1_p1-r1
4.2.2-r0
4.2.3-r0
4.2.3_p1-r0
4.2.3_p2-r0
4.2.3_p2-r1
4.2.4-r0
4.2.4_p1-r0
4.2.4_p1-r1
4.2.4_p2-r0
4.2.5-r0
4.2.5_p1-r0
4.2.5_p1-r1
4.2.5_p1-r2
4.3.0-r0
4.3.0-r1
4.3.1-r0
4.3.1-r1
4.3.2-r0
4.3.3-r0
4.3.3_p1-r0
4.3.4-r0
4.3.4-r1
4.3.4-r2
4.3.4-r3
4.3.5-r0
4.4.1-r0
4.4.1-r1
4.4.1-r2
4.4.1-r3
4.4.1-r4
4.4.1-r5
4.4.1-r6
4.4.1-r7
4.4.2-r0
4.4.2-r1
4.4.2-r2
4.4.2-r3
4.4.2_p1-r0
4.4.2_p1-r1

Alpine:v3.16 / dhcp

Package

Name
dhcp
Purl
pkg:apk/alpine/dhcp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.3_p1-r0

Affected versions

4.*

4.1.0-r0
4.1.0_p1-r0
4.1.0_p1-r1
4.1.0_p1-r2
4.1.0_p1-r3
4.1.0_p1-r4
4.1.0_p1-r5
4.1.0_p1-r6
4.1.0_p1-r7
4.1.0_p1-r8
4.1.0_p1-r9
4.1.0_p1-r10
4.1.1_p1-r0
4.1.1_p1-r1
4.2.0-r0
4.2.0_p1-r0
4.2.0_p2-r0
4.2.1-r0
4.2.1_p1-r0
4.2.1_p1-r1
4.2.2-r0
4.2.3-r0
4.2.3_p1-r0
4.2.3_p2-r0
4.2.3_p2-r1
4.2.4-r0
4.2.4_p1-r0
4.2.4_p1-r1
4.2.4_p2-r0
4.2.5-r0
4.2.5_p1-r0
4.2.5_p1-r1
4.2.5_p1-r2
4.3.0-r0
4.3.0-r1
4.3.1-r0
4.3.1-r1
4.3.2-r0
4.3.3-r0
4.3.3_p1-r0
4.3.4-r0
4.3.4-r1
4.3.4-r2
4.3.4-r3
4.3.5-r0
4.4.1-r0
4.4.1-r1
4.4.1-r2
4.4.1-r3
4.4.1-r4
4.4.1-r5
4.4.1-r6
4.4.1-r7
4.4.2-r0
4.4.2-r1
4.4.2-r2
4.4.2-r3
4.4.2_p1-r0
4.4.2_p1-r1
4.4.3-r0

Alpine:v3.17 / dhcp

Package

Name
dhcp
Purl
pkg:apk/alpine/dhcp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.3_p1-r0

Affected versions

4.*

4.1.0-r0
4.1.0_p1-r0
4.1.0_p1-r1
4.1.0_p1-r2
4.1.0_p1-r3
4.1.0_p1-r4
4.1.0_p1-r5
4.1.0_p1-r6
4.1.0_p1-r7
4.1.0_p1-r8
4.1.0_p1-r9
4.1.0_p1-r10
4.1.1_p1-r0
4.1.1_p1-r1
4.2.0-r0
4.2.0_p1-r0
4.2.0_p2-r0
4.2.1-r0
4.2.1_p1-r0
4.2.1_p1-r1
4.2.2-r0
4.2.3-r0
4.2.3_p1-r0
4.2.3_p2-r0
4.2.3_p2-r1
4.2.4-r0
4.2.4_p1-r0
4.2.4_p1-r1
4.2.4_p2-r0
4.2.5-r0
4.2.5_p1-r0
4.2.5_p1-r1
4.2.5_p1-r2
4.3.0-r0
4.3.0-r1
4.3.1-r0
4.3.1-r1
4.3.2-r0
4.3.3-r0
4.3.3_p1-r0
4.3.4-r0
4.3.4-r1
4.3.4-r2
4.3.4-r3
4.3.5-r0
4.4.1-r0
4.4.1-r1
4.4.1-r2
4.4.1-r3
4.4.1-r4
4.4.1-r5
4.4.1-r6
4.4.1-r7
4.4.2-r0
4.4.2-r1
4.4.2-r2
4.4.2-r3
4.4.2_p1-r0
4.4.2_p1-r1
4.4.3-r0

Alpine:v3.18 / dhcp

Package

Name
dhcp
Purl
pkg:apk/alpine/dhcp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.3_p1-r0

Affected versions

4.*

4.1.0-r0
4.1.0_p1-r0
4.1.0_p1-r1
4.1.0_p1-r2
4.1.0_p1-r3
4.1.0_p1-r4
4.1.0_p1-r5
4.1.0_p1-r6
4.1.0_p1-r7
4.1.0_p1-r8
4.1.0_p1-r9
4.1.0_p1-r10
4.1.1_p1-r0
4.1.1_p1-r1
4.2.0-r0
4.2.0_p1-r0
4.2.0_p2-r0
4.2.1-r0
4.2.1_p1-r0
4.2.1_p1-r1
4.2.2-r0
4.2.3-r0
4.2.3_p1-r0
4.2.3_p2-r0
4.2.3_p2-r1
4.2.4-r0
4.2.4_p1-r0
4.2.4_p1-r1
4.2.4_p2-r0
4.2.5-r0
4.2.5_p1-r0
4.2.5_p1-r1
4.2.5_p1-r2
4.3.0-r0
4.3.0-r1
4.3.1-r0
4.3.1-r1
4.3.2-r0
4.3.3-r0
4.3.3_p1-r0
4.3.4-r0
4.3.4-r1
4.3.4-r2
4.3.4-r3
4.3.5-r0
4.4.1-r0
4.4.1-r1
4.4.1-r2
4.4.1-r3
4.4.1-r4
4.4.1-r5
4.4.1-r6
4.4.1-r7
4.4.2-r0
4.4.2-r1
4.4.2-r2
4.4.2-r3
4.4.2_p1-r0
4.4.2_p1-r1
4.4.3-r0

Alpine:v3.19 / dhcp

Package

Name
dhcp
Purl
pkg:apk/alpine/dhcp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.3_p1-r0

Affected versions

4.*

4.1.0-r0
4.1.0_p1-r0
4.1.0_p1-r1
4.1.0_p1-r2
4.1.0_p1-r3
4.1.0_p1-r4
4.1.0_p1-r5
4.1.0_p1-r6
4.1.0_p1-r7
4.1.0_p1-r8
4.1.0_p1-r9
4.1.0_p1-r10
4.1.1_p1-r0
4.1.1_p1-r1
4.2.0-r0
4.2.0_p1-r0
4.2.0_p2-r0
4.2.1-r0
4.2.1_p1-r0
4.2.1_p1-r1
4.2.2-r0
4.2.3-r0
4.2.3_p1-r0
4.2.3_p2-r0
4.2.3_p2-r1
4.2.4-r0
4.2.4_p1-r0
4.2.4_p1-r1
4.2.4_p2-r0
4.2.5-r0
4.2.5_p1-r0
4.2.5_p1-r1
4.2.5_p1-r2
4.3.0-r0
4.3.0-r1
4.3.1-r0
4.3.1-r1
4.3.2-r0
4.3.3-r0
4.3.3_p1-r0
4.3.4-r0
4.3.4-r1
4.3.4-r2
4.3.4-r3
4.3.5-r0
4.4.1-r0
4.4.1-r1
4.4.1-r2
4.4.1-r3
4.4.1-r4
4.4.1-r5
4.4.1-r6
4.4.1-r7
4.4.2-r0
4.4.2-r1
4.4.2-r2
4.4.2-r3
4.4.2_p1-r0
4.4.2_p1-r1
4.4.3-r0

Alpine:v3.20 / dhcp

Package

Name
dhcp
Purl
pkg:apk/alpine/dhcp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.3_p1-r0

Affected versions

4.*

4.1.0-r0
4.1.0_p1-r0
4.1.0_p1-r1
4.1.0_p1-r2
4.1.0_p1-r3
4.1.0_p1-r4
4.1.0_p1-r5
4.1.0_p1-r6
4.1.0_p1-r7
4.1.0_p1-r8
4.1.0_p1-r9
4.1.0_p1-r10
4.1.1_p1-r0
4.1.1_p1-r1
4.2.0-r0
4.2.0_p1-r0
4.2.0_p2-r0
4.2.1-r0
4.2.1_p1-r0
4.2.1_p1-r1
4.2.2-r0
4.2.3-r0
4.2.3_p1-r0
4.2.3_p2-r0
4.2.3_p2-r1
4.2.4-r0
4.2.4_p1-r0
4.2.4_p1-r1
4.2.4_p2-r0
4.2.5-r0
4.2.5_p1-r0
4.2.5_p1-r1
4.2.5_p1-r2
4.3.0-r0
4.3.0-r1
4.3.1-r0
4.3.1-r1
4.3.2-r0
4.3.3-r0
4.3.3_p1-r0
4.3.4-r0
4.3.4-r1
4.3.4-r2
4.3.4-r3
4.3.5-r0
4.4.1-r0
4.4.1-r1
4.4.1-r2
4.4.1-r3
4.4.1-r4
4.4.1-r5
4.4.1-r6
4.4.1-r7
4.4.2-r0
4.4.2-r1
4.4.2-r2
4.4.2-r3
4.4.2_p1-r0
4.4.2_p1-r1
4.4.3-r0

Debian:11 / isc-dhcp

Package

Name
isc-dhcp
Purl
pkg:deb/debian/isc-dhcp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.1-2.3+deb11u1

Affected versions

4.*

4.4.1-2.3

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / isc-dhcp

Package

Name
isc-dhcp
Purl
pkg:deb/debian/isc-dhcp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.3-2.1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / isc-dhcp

Package

Name
isc-dhcp
Purl
pkg:deb/debian/isc-dhcp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.3-2.1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / gitlab.isc.org/isc-projects/dhcp

Affected ranges

Type
GIT
Repo
https://gitlab.isc.org/isc-projects/dhcp
Events
Last affected
240d9b62e137cad28a08893326ab66d4cd7bbb89
Last affected
2a00efe8700df8bfd11881fdabeb18f33e8d9fe6
Last affected
2d5ca865b7268d2f60a485c9a50f96b7890dd51f
Last affected
331193dd54344dc74ca1987797d99bb57ba277fe
Introduced
075a2f45da9a3194c9ea2c72b2167d9bb5bd0c21
Last affected
33226f2d76b6b7a06df6b76abbb3526100f5ae2d
Last affected
3709b7fc844ab8384ba40a1be3cf7916168423e1
Last affected
3a1078b6d1292305c9e784cdce97d9ae6934cc01
Last affected
48e431b9f0e0058453387810a3878491c6e879ee
Last affected
4f5c8255511e3600288eddfa6a4e594fde107458
Last affected
54ec15cba2c5157bedf45cae9d062814e75e928e
Last affected
5a35af42ed56626997e03986aacbfa6c394c5a8d
Last affected
8423b4587ea3eef2a55b9ab693c828d46e238f0a
Last affected
9f35323a8abe2ed4bc567b2b2613fc3ef9254e8f
Last affected
a05db3d943208ab168a9aba9117706bb58baea7c
Last affected
c4a3c3ee213715ff5a3f6255001148e333029741
Last affected
dda169525b6109935c76d2a7f0c479ff4fda0e82
Last affected
efaedc0d804d0c9ff0a798b677b838a79e2de52f
Last affected
f0bd8bdff79188c900a31e763377eb1d25e80eb0
Last affected
f10f02aa92b38606897523e19ad090fc0464a955

Affected versions

Other

list
v4_4_0
v4_4_0_f1
v4_4_1
v4_4_1_f1
v4_4_2
v4_4_2_f1
v4_4_2b1
v4_4_2b1_f1
v4_4_2b1_f2
v4_4_3