7.5

CVE-2018-5732: isc dhcp

CVSS: 7.5v3.0HighModified
AliasesALPINE-CVE-2018-5732UBUNTU-CVE-2018-5732DEBIAN-CVE-2018-5732
Published 09-10-2019Last modified 16-09-2024
Open JSON

Vulnerability summary

CVE-2018-5732 is a high (CVSS 7.5) vulnerability in isc dhcp. EPSS estimates a 5.24% chance of exploitation in the next 30 days, higher than 92.4% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.0 (CVE.org)
EPSS score
5.24%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 10 · Related 5
DLA-1313-1DSA-4133-1MGASA-2018-0410OPENSUSE-SU-2024:10715-1RHSA-2018:0469RHSA-2018:0483

Timeline

  1. 09-10-2019
    PublishedVulnerability first disclosed.
  2. 16-09-2024
    Last modifiedVulnerability information updated.

Description

Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a response containing a specially constructed options section. Affects ISC DHCP versions 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0

CVSS metrics

8 scores · 5 sources · 3 versions

EPSS trend

Probability

5.24%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

0.00 pp

From 5.24% on 18-09-2026

18-09-202618-10-2026
EPSS score
5.24%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Isc2 products
  • dhcp≥ 4.1.0, ≤ 4.1.2 | ≥ 4.2.0, < 4.2.8 | ≥ 4.3.0, < 4.3.6 | 4.1-esv | 4.1-esv:r1 | 4.1-esv:r10 | 4.1-esv:r10b1 | 4.1-esv:r10rc1 | 4.1-esv:r11 | 4.1-esv:r11b1 | 4.1-esv:r11rc1 | 4.1-esv:r11rc2 | 4.1-esv:r12 | 4.1-esv:r12-p1 | 4.1-esv:r12b1 | 4.1-esv:r13 | 4.1-esv:r13b1 | 4.1-esv:r14 | 4.1-esv:r14b1 | 4.1-esv:r15 | 4.1-esv:r2 | 4.1-esv:r3 | 4.1-esv:r3b1 | 4.1-esv:r4 | 4.1-esv:r5 | 4.1-esv:r5b1 | 4.1-esv:r5rc1 | 4.1-esv:r5rc2 | 4.1-esv:r6 | 4.1-esv:r7 | 4.1-esv:r8 | 4.1-esv:r8b1 | 4.1-esv:r8rc1 | 4.1-esv:r9 | 4.1-esv:r9b1 | 4.1-esv:r9rc1 | 4.1.2:p1 | 4.4.0
  • isc dhcpISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0
Alpine1 product
  • dhcp≥ 4.1.0, < 4.4.1-r0
Debian1 product
  • isc-dhcp< 4.3.5-3.1
Ubuntu1 product
  • isc-dhcp< 4.2.4-7ubuntu12.12 | < 4.3.3-5ubuntu12.9 | < 4.3.5-3ubuntu5

4 vendors · 5 products

References

8 links