CVE-2003-0026: isc dhcpd

EPSS trend

Probability

18.85%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 18.85% on 20-09-2026

20-09-202620-10-2026

EPSS score

18.85%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

13 links

www.redhat.com/support/errata/RHSA-2003-011.htmlVendor AdvisoryX Refsource REDHATPatch
www.openpkg.com/security/advisories/OpenPKG-SA-2003.002.htmlVendor AdvisoryX Refsource OPENPKG
www.securitytracker.com/id?1005924VDB EntryX Refsource SECTRACK
www.debian.org/security/2003/dsa-231Vendor AdvisoryX Refsource DEBIANPatch
www.securityfocus.com/bid/6627VDB EntryX Refsource BID
exchange.xforce.ibmcloud.com/vulnerabilities/11073VDB EntryX Refsource XF
www.mandriva.com/security/advisories?name=MDKSA-2003:007Vendor AdvisoryX Refsource MANDRAKE
www.kb.cert.org/vuls/id/284857Third Party AdvisoryX Refsource CERT VNPatchUS Government Resource
www.cert.org/advisories/CA-2003-01.htmlThird Party AdvisoryX Refsource CERTPatchUS Government Resource
www.ciac.org/ciac/bulletins/n-031.shtmlThird Party AdvisoryGovernment ResourceX Refsource CIAC

Show all 13 references

www.suse.com/de/security/2003_006_dhcp.htmlVendor AdvisoryX Refsource SUSE
archives.neohapsis.com/archives/bugtraq/2003-01/0250.htmlMailing ListX Refsource BUGTRAQ
distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000562Vendor AdvisoryX Refsource CONECTIVA

Related vulnerabilities

CVE-2003-0039debiandhcp3+17.95%22y ago01-09-2004 04:00ISC dhcrelay (dhcp-relay) 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (packet storm) via a certain BOOTP packet that is forwarded to a broadcast MAC address, causing an infinite loop that is not restricted by a hop count.CVE-2004-1006debiandhcp+17.97%21y ago19-11-2004 05:00Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702.CVE-2004-0460infobloxdns_one_appliance+545.33%22y ago24-06-2004 04:00Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, or (5) NAK messages, which can generate a long string when writing to a log file.CVE-2004-0461infobloxdns_one_appliance+516.77%22y ago24-06-2004 04:00The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.CVE-2002-0702iscdhcpd31.14%24y ago23-07-2002 04:00Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response.CVE-2019-6470alpinedhcp+518.81%6y ago01-11-2019 22:15There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version lists for all repackagings of dhcpd that are vulnerable. In particular, builds from other vendors may also be affected. Operators are advised to consult their vendor documentation.

All vulnerabilities indhcpd

CVE-2003-0026: isc dhcpd

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References