{"id":"CVE-2016-2774","details":"ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to cause a denial of service (INSIST assertion failure or request-processing outage) by establishing many sessions.","modified":"2026-07-08T05:48:53.988862840Z","published":"2016-03-09T15:59:00.147Z","related":["SUSE-SU-2016:1692-1","SUSE-SU-2016:1735-1","SUSE-SU-2016:1791-1","SUSE-SU-2016:2024-1"],"database_specific":{"unresolved_ranges":[{"source":"CPE_STRING","vendor_product":"canonical:ubuntu_linux","cpes":["cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"14.04"},{"last_affected":"14.04"},{"introduced":"16.04"},{"last_affected":"16.04"},{"introduced":"17.10"},{"last_affected":"17.10"}]},{"extracted_events":[{"introduced":"8.0"},{"last_affected":"8.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux","cpes":["cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:isc:dhcp:4.1-esv:rc1:*:*:*:*:*:*"],"extracted_events":[{"introduced":"4.1-esv-rc1"},{"last_affected":"4.1-esv-rc1"}],"source":"CPE_STRING","vendor_product":"isc:dhcp"}]},"references":[{"type":"ADVISORY","url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183458.html"},{"type":"ADVISORY","url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183640.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-updates/2016-07/msg00066.html"},{"type":"ADVISORY","url":"http://rhn.redhat.com/errata/RHSA-2016-2590.html"},{"type":"ADVISORY","url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/84208"},{"type":"ADVISORY","url":"http://www.securitytracker.com/id/1035196"},{"type":"ADVISORY","url":"https://kb.isc.org/article/AA-01354"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2019/11/msg00023.html"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/3586-1/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.isc.org/isc-projects/dhcp","events":[{"introduced":"b39dd193dc3d189d3669866d73a87172545e2a4b"},{"last_affected":"f02df8e557d93f388d4040a3a4610cc48391edc6"}],"database_specific":{"source":"CPE_STRING","cpe":["cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1.1:-:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r10:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r10_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r11_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc2:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r12:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r12_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1.2:-:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r7:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r8:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r8_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r8_rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r9:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r9_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r9_rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1.0:-:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1.0:a1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1.0:b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1.0:a2:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1.1:b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1.1:p1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1.1:b2:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1.1:b3:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1.1:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1.2:b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1.2:p1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1.2:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.0:-:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.0:a1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.0:b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.0:p1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.0:a2:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.0:b2:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.0:p2:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.0:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.1:-:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.1:b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.1:p1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.1:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.2:-:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.2:b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.2:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.3:-:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.3:p1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.3:p2:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.4:-:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.4:b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.4:p1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.4:p2:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.4:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.4:rc2:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.5:-:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.5:b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.5:p1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.5:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.6:-:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.6:b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.6:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.7:-:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.7:b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.7:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.8:-:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.8:b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.8:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.2.8:rc2:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.3.0:-:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.3.0:a1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.3.0:b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.3.0:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.3.1:-:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.3.1:b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.3.1:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.3.2:-:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.3.2:b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.3.2:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.3.2:rc2:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.3.3:-:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.3.3:b1:*:*:*:*:*:*"],"extracted_events":[{"introduced":"4.1-esv-NA"},{"last_affected":"4.1-esv-NA"},{"introduced":"4.1-esv-r1"},{"last_affected":"4.1-esv-r1"},{"introduced":"4.1.1-NA"},{"last_affected":"4.1.1-NA"},{"introduced":"4.1-esv-r10"},{"last_affected":"4.1-esv-r10"},{"introduced":"4.1-esv-r10_b1"},{"last_affected":"4.1-esv-r10_b1"},{"introduced":"4.1-esv-r11_b1"},{"last_affected":"4.1-esv-r11_b1"},{"introduced":"4.1-esv-r11_rc1"},{"last_affected":"4.1-esv-r11_rc1"},{"introduced":"4.1-esv-r11_rc2"},{"last_affected":"4.1-esv-r11_rc2"},{"introduced":"4.1-esv-r12"},{"last_affected":"4.1-esv-r12"},{"introduced":"4.1-esv-r12_b1"},{"last_affected":"4.1-esv-r12_b1"},{"introduced":"4.1-esv-r2"},{"last_affected":"4.1-esv-r2"},{"introduced":"4.1.2-NA"},{"last_affected":"4.1.2-NA"},{"introduced":"4.1-esv-r3"},{"last_affected":"4.1-esv-r3"},{"introduced":"4.1-esv-r3_b1"},{"last_affected":"4.1-esv-r3_b1"},{"introduced":"4.1-esv-r4"},{"last_affected":"4.1-esv-r4"},{"introduced":"4.1-esv-r5"},{"last_affected":"4.1-esv-r5"},{"introduced":"4.1-esv-r5_b1"},{"last_affected":"4.1-esv-r5_b1"},{"introduced":"4.1-esv-r5_rc1"},{"last_affected":"4.1-esv-r5_rc1"},{"introduced":"4.1-esv-r5_rc2"},{"last_affected":"4.1-esv-r5_rc2"},{"introduced":"4.1-esv-r6"},{"last_affected":"4.1-esv-r6"},{"introduced":"4.1-esv-r7"},{"last_affected":"4.1-esv-r7"},{"introduced":"4.1-esv-r8"},{"last_affected":"4.1-esv-r8"},{"introduced":"4.1-esv-r8_b1"},{"last_affected":"4.1-esv-r8_b1"},{"introduced":"4.1-esv-r8_rc1"},{"last_affected":"4.1-esv-r8_rc1"},{"introduced":"4.1-esv-r9"},{"last_affected":"4.1-esv-r9"},{"introduced":"4.1-esv-r9_b1"},{"last_affected":"4.1-esv-r9_b1"},{"introduced":"4.1-esv-r9_rc1"},{"last_affected":"4.1-esv-r9_rc1"},{"introduced":"4.1.0-NA"},{"last_affected":"4.1.0-NA"},{"introduced":"4.1.0-a1"},{"last_affected":"4.1.0-a1"},{"introduced":"4.1.0-b1"},{"last_affected":"4.1.0-b1"},{"introduced":"4.1.0-a2"},{"last_affected":"4.1.0-a2"},{"introduced":"4.1.1-b1"},{"last_affected":"4.1.1-b1"},{"introduced":"4.1.1-p1"},{"last_affected":"4.1.1-p1"},{"introduced":"4.1.1-b2"},{"last_affected":"4.1.1-b2"},{"introduced":"4.1.1-b3"},{"last_affected":"4.1.1-b3"},{"introduced":"4.1.1-rc1"},{"last_affected":"4.1.1-rc1"},{"introduced":"4.1.2-b1"},{"last_affected":"4.1.2-b1"},{"introduced":"4.1.2-p1"},{"last_affected":"4.1.2-p1"},{"introduced":"4.1.2-rc1"},{"last_affected":"4.1.2-rc1"},{"introduced":"4.2.0-NA"},{"last_affected":"4.2.0-NA"},{"introduced":"4.2.0-a1"},{"last_affected":"4.2.0-a1"},{"introduced":"4.2.0-b1"},{"last_affected":"4.2.0-b1"},{"introduced":"4.2.0-p1"},{"last_affected":"4.2.0-p1"},{"introduced":"4.2.0-a2"},{"last_affected":"4.2.0-a2"},{"introduced":"4.2.0-b2"},{"last_affected":"4.2.0-b2"},{"introduced":"4.2.0-p2"},{"last_affected":"4.2.0-p2"},{"introduced":"4.2.0-rc1"},{"last_affected":"4.2.0-rc1"},{"introduced":"4.2.1-NA"},{"last_affected":"4.2.1-NA"},{"introduced":"4.2.1-b1"},{"last_affected":"4.2.1-b1"},{"introduced":"4.2.1-p1"},{"last_affected":"4.2.1-p1"},{"introduced":"4.2.1-rc1"},{"last_affected":"4.2.1-rc1"},{"introduced":"4.2.2-NA"},{"last_affected":"4.2.2-NA"},{"introduced":"4.2.2-b1"},{"last_affected":"4.2.2-b1"},{"introduced":"4.2.2-rc1"},{"last_affected":"4.2.2-rc1"},{"introduced":"4.2.3-NA"},{"last_affected":"4.2.3-NA"},{"introduced":"4.2.3-p1"},{"last_affected":"4.2.3-p1"},{"introduced":"4.2.3-p2"},{"last_affected":"4.2.3-p2"},{"introduced":"4.2.4-NA"},{"last_affected":"4.2.4-NA"},{"introduced":"4.2.4-b1"},{"last_affected":"4.2.4-b1"},{"introduced":"4.2.4-p1"},{"last_affected":"4.2.4-p1"},{"introduced":"4.2.4-p2"},{"last_affected":"4.2.4-p2"},{"introduced":"4.2.4-rc1"},{"last_affected":"4.2.4-rc1"},{"introduced":"4.2.4-rc2"},{"last_affected":"4.2.4-rc2"},{"introduced":"4.2.5-NA"},{"last_affected":"4.2.5-NA"},{"introduced":"4.2.5-b1"},{"last_affected":"4.2.5-b1"},{"introduced":"4.2.5-p1"},{"last_affected":"4.2.5-p1"},{"introduced":"4.2.5-rc1"},{"last_affected":"4.2.5-rc1"},{"introduced":"4.2.6-NA"},{"last_affected":"4.2.6-NA"},{"introduced":"4.2.6-b1"},{"last_affected":"4.2.6-b1"},{"introduced":"4.2.6-rc1"},{"last_affected":"4.2.6-rc1"},{"introduced":"4.2.7-NA"},{"last_affected":"4.2.7-NA"},{"introduced":"4.2.7-b1"},{"last_affected":"4.2.7-b1"},{"introduced":"4.2.7-rc1"},{"last_affected":"4.2.7-rc1"},{"introduced":"4.2.8-NA"},{"last_affected":"4.2.8-NA"},{"introduced":"4.2.8-b1"},{"last_affected":"4.2.8-b1"},{"introduced":"4.2.8-rc1"},{"last_affected":"4.2.8-rc1"},{"introduced":"4.2.8-rc2"},{"last_affected":"4.2.8-rc2"},{"introduced":"4.3.0-NA"},{"last_affected":"4.3.0-NA"},{"introduced":"4.3.0-a1"},{"last_affected":"4.3.0-a1"},{"introduced":"4.3.0-b1"},{"last_affected":"4.3.0-b1"},{"introduced":"4.3.0-rc1"},{"last_affected":"4.3.0-rc1"},{"introduced":"4.3.1-NA"},{"last_affected":"4.3.1-NA"},{"introduced":"4.3.1-b1"},{"last_affected":"4.3.1-b1"},{"introduced":"4.3.1-rc1"},{"last_affected":"4.3.1-rc1"},{"introduced":"4.3.2-NA"},{"last_affected":"4.3.2-NA"},{"introduced":"4.3.2-b1"},{"last_affected":"4.3.2-b1"},{"introduced":"4.3.2-rc1"},{"last_affected":"4.3.2-rc1"},{"introduced":"4.3.2-rc2"},{"last_affected":"4.3.2-rc2"},{"introduced":"4.3.3-NA"},{"last_affected":"4.3.3-NA"},{"introduced":"4.3.3-b1"},{"last_affected":"4.3.3-b1"}]}}],"versions":["4.1-esv-NA","4.1-esv-r1","4.1-esv-r10","4.1-esv-r10_b1","4.1-esv-r11_b1","4.1-esv-r11_rc1","4.1-esv-r11_rc2","4.1-esv-r12","4.1-esv-r12_b1","4.1-esv-r2","4.1-esv-r3","4.1-esv-r3_b1","4.1-esv-r4","4.1-esv-r5","4.1-esv-r5_b1","4.1-esv-r5_rc1","4.1-esv-r5_rc2","4.1-esv-r6","4.1-esv-r7","4.1-esv-r8","4.1-esv-r8_b1","4.1-esv-r8_rc1","4.1-esv-r9","4.1-esv-r9_b1","4.1-esv-r9_rc1","4.1.0-NA","4.1.0-a1","4.1.0-a2","4.1.1-b1","4.1.1-b2","4.1.1-b3","4.1.1-rc1","4.1.2-b1","4.1.2-rc1","4.2.0-NA","4.2.0-a1","4.2.0-a2","4.2.0-rc1","4.2.1-NA","4.2.1-b1","4.2.1-rc1","4.2.2-NA","4.2.2-b1","4.2.2-rc1","4.2.3-NA","4.2.3-p1","4.2.3-p2","4.2.4-NA","4.2.4-b1","4.2.4-p2","4.2.4-rc1","4.2.4-rc2","4.2.5-NA","4.2.5-b1","4.2.5-rc1","4.2.6-NA","4.2.6-b1","4.2.6-rc1","4.2.7-NA","4.2.7-b1","4.2.7-rc1","4.2.8-NA","4.2.8-b1","4.2.8-rc1","4.2.8-rc2","4.3.0-NA","4.3.0-a1","4.3.0-rc1","4.3.1-NA","4.3.1-b1","4.3.1-rc1","4.3.2-NA","4.3.2-b1","4.3.2-rc1","4.3.2-rc2","4.3.3-NA","4.3.3-b1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2774.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}