{"id":"CVE-2018-5732","details":"Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a response containing a specially constructed options section. Affects ISC DHCP versions 4.1.0 -\u003e 4.1-ESV-R15, 4.2.0 -\u003e 4.2.8, 4.3.0 -\u003e 4.3.6, 4.4.0","modified":"2026-07-08T16:41:00.269956Z","published":"2019-10-09T16:15:13.407Z","related":["SUSE-SU-2018:0810-1","SUSE-SU-2018:0810-2","SUSE-SU-2018:0812-1","openSUSE-SU-2024:10715-1"],"references":[{"type":"ADVISORY","url":"https://kb.isc.org/docs/aa-01565"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.isc.org/isc-projects/dhcp","events":[{"introduced":"2a4ff20abc29fe2647de68e6a6eea8e49e6ce941"},{"last_affected":"9ff9a4e8131e7b5f144050b538ff866f89c98ffc"},{"introduced":"079f747eb20d40e80c65e8a984d6c50860560b3c"},{"fixed":"8541c4fcbc6364800775234bacfe646ef16bfd38"},{"introduced":"5de62c8b34a94e66269b39c663cd222047216306"},{"fixed":"c1bd79a15e9b689e8a18538aaedec0ab8bd04b17"},{"introduced":"b39dd193dc3d189d3669866d73a87172545e2a4b"},{"last_affected":"075a2f45da9a3194c9ea2c72b2167d9bb5bd0c21"}],"database_specific":{"cpe":["cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r10:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r10b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r10rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r11:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r11b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r11rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r11rc2:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r12:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r12-p1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r12b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r13:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r13b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r14:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r14b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r15:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r3b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r5b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r5rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r5rc2:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r7:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r8:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r8b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r8rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r9:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r9b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r9rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1.2:p1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.4.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"4.1.0"},{"last_affected":"4.1.2"},{"introduced":"4.2.0"},{"fixed":"4.2.8"},{"introduced":"4.3.0"},{"fixed":"4.3.6"},{"introduced":"4.1-esv-NA"},{"last_affected":"4.1-esv-NA"},{"introduced":"4.1-esv-r1"},{"last_affected":"4.1-esv-r1"},{"introduced":"4.1-esv-r10"},{"last_affected":"4.1-esv-r10"},{"introduced":"4.1-esv-r10b1"},{"last_affected":"4.1-esv-r10b1"},{"introduced":"4.1-esv-r10rc1"},{"last_affected":"4.1-esv-r10rc1"},{"introduced":"4.1-esv-r11"},{"last_affected":"4.1-esv-r11"},{"introduced":"4.1-esv-r11b1"},{"last_affected":"4.1-esv-r11b1"},{"introduced":"4.1-esv-r11rc1"},{"last_affected":"4.1-esv-r11rc1"},{"introduced":"4.1-esv-r11rc2"},{"last_affected":"4.1-esv-r11rc2"},{"introduced":"4.1-esv-r12"},{"last_affected":"4.1-esv-r12"},{"introduced":"4.1-esv-r12\\-p1"},{"last_affected":"4.1-esv-r12\\-p1"},{"introduced":"4.1-esv-r12b1"},{"last_affected":"4.1-esv-r12b1"},{"introduced":"4.1-esv-r13"},{"last_affected":"4.1-esv-r13"},{"introduced":"4.1-esv-r13b1"},{"last_affected":"4.1-esv-r13b1"},{"introduced":"4.1-esv-r14"},{"last_affected":"4.1-esv-r14"},{"introduced":"4.1-esv-r14b1"},{"last_affected":"4.1-esv-r14b1"},{"introduced":"4.1-esv-r15"},{"last_affected":"4.1-esv-r15"},{"introduced":"4.1-esv-r2"},{"last_affected":"4.1-esv-r2"},{"introduced":"4.1-esv-r3"},{"last_affected":"4.1-esv-r3"},{"introduced":"4.1-esv-r3b1"},{"last_affected":"4.1-esv-r3b1"},{"introduced":"4.1-esv-r4"},{"last_affected":"4.1-esv-r4"},{"introduced":"4.1-esv-r5"},{"last_affected":"4.1-esv-r5"},{"introduced":"4.1-esv-r5b1"},{"last_affected":"4.1-esv-r5b1"},{"introduced":"4.1-esv-r5rc1"},{"last_affected":"4.1-esv-r5rc1"},{"introduced":"4.1-esv-r5rc2"},{"last_affected":"4.1-esv-r5rc2"},{"introduced":"4.1-esv-r6"},{"last_affected":"4.1-esv-r6"},{"introduced":"4.1-esv-r7"},{"last_affected":"4.1-esv-r7"},{"introduced":"4.1-esv-r8"},{"last_affected":"4.1-esv-r8"},{"introduced":"4.1-esv-r8b1"},{"last_affected":"4.1-esv-r8b1"},{"introduced":"4.1-esv-r8rc1"},{"last_affected":"4.1-esv-r8rc1"},{"introduced":"4.1-esv-r9"},{"last_affected":"4.1-esv-r9"},{"introduced":"4.1-esv-r9b1"},{"last_affected":"4.1-esv-r9b1"},{"introduced":"4.1-esv-r9rc1"},{"last_affected":"4.1-esv-r9rc1"},{"introduced":"4.1.2-p1"},{"last_affected":"4.1.2-p1"},{"introduced":"4.4.0"},{"last_affected":"4.4.0"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["4.1-esv-NA","4.1-esv-r1","4.1-esv-r10","4.1-esv-r10b1","4.1-esv-r10rc1","4.1-esv-r11","4.1-esv-r11b1","4.1-esv-r11rc1","4.1-esv-r11rc2","4.1-esv-r12","4.1-esv-r12\\-p1","4.1-esv-r13","4.1-esv-r13b1","4.1-esv-r14","4.1-esv-r14b1","4.1-esv-r15","4.1-esv-r2","4.1-esv-r3","4.1-esv-r3b1","4.1-esv-r4","4.1-esv-r5","4.1-esv-r5b1","4.1-esv-r5rc1","4.1-esv-r5rc2","4.1-esv-r6","4.1-esv-r7","4.1-esv-r8","4.1-esv-r8b1","4.1-esv-r8rc1","4.1-esv-r9","4.1-esv-r9b1","4.1-esv-r9rc1","4.1.2-p1","4.4.0","v4_4_0","v4_4_0b1_f1","v4_3_6b1","v4_3_5","v4_3_5b1","v4_3_4","v4_3_3","v4_3_3b1","v4_3_2","v4_2_8_rc2","v4_3_2rc2","v4_2_8rc1","v4_3_2rc1","v4_2_8b1","v4_3_2b1","v4_3_2.pre-beta","v4_2_7","v4_3_1","v4_3_1rc1","v4_2_7rc1","v4_2_7b1","v4_3_1b1","v4_2_6","v4_3_0","v4_2_6rc1","v4_2_6b1","v4_2_5","v4_2_5rc1","v4_2_5b1","v4_2_4","v4_2_4rc2","v4_2_4rc1","v4_2_4b1","v4_2_3","v4_2_3rc1","v4_2_2","v4_2_2rc1","v4_2_2b1","v4_1_esv_r2","v4_2_1_P1","v4_1_esv_r1","v4_2_1","v4_2_1rc1","v4_2_1b1","v4_1_esv_r0","v4_2_0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-5732.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}