{"id":"CVE-2018-5733","details":"A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 -\u003e 4.1-ESV-R15, 4.2.0 -\u003e 4.2.8, 4.3.0 -\u003e 4.3.6, 4.4.0.","modified":"2026-07-08T05:52:32.475862494Z","published":"2019-01-16T20:29:00.753Z","related":["SUSE-SU-2018:0810-1","SUSE-SU-2018:0810-2","SUSE-SU-2018:0812-1","openSUSE-SU-2024:10715-1"],"database_specific":{"unresolved_ranges":[{"vendor_product":"canonical:ubuntu_linux","cpes":["cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"14.04"},{"last_affected":"14.04"},{"introduced":"16.04"},{"last_affected":"16.04"},{"introduced":"17.10"},{"last_affected":"17.10"}],"source":"CPE_STRING"},{"extracted_events":[{"introduced":"7.0"},{"last_affected":"7.0"},{"introduced":"8.0"},{"last_affected":"8.0"},{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux","cpes":["cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:isc:dhcp:4.1-esv:rc1:*:*:*:*:*:*"],"extracted_events":[{"introduced":"4.1-esv-rc1"},{"last_affected":"4.1-esv-rc1"}],"source":"CPE_STRING","vendor_product":"isc:dhcp"},{"vendor_product":"redhat:enterprise_linux_desktop","cpes":["cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.0"},{"last_affected":"6.0"},{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING"},{"vendor_product":"redhat:enterprise_linux_server","cpes":["cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.0"},{"last_affected":"6.0"},{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING"},{"vendor_product":"redhat:enterprise_linux_server_aus","cpes":["cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.4"},{"last_affected":"7.4"},{"introduced":"7.6"},{"last_affected":"7.6"}],"source":"CPE_STRING"},{"vendor_product":"redhat:enterprise_linux_server_eus","cpes":["cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.4"},{"last_affected":"7.4"},{"introduced":"7.5"},{"last_affected":"7.5"},{"introduced":"7.6"},{"last_affected":"7.6"}],"source":"CPE_STRING"},{"extracted_events":[{"introduced":"6.0"},{"last_affected":"6.0"},{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_workstation","cpes":["cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"]}]},"references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/103188"},{"type":"ADVISORY","url":"http://www.securitytracker.com/id/1040437"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:0469"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:0483"},{"type":"ADVISORY","url":"https://kb.isc.org/docs/aa-01567"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2018/03/msg00015.html"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20250425-0010/"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/3586-1/"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/3586-2/"},{"type":"ADVISORY","url":"https://www.debian.org/security/2018/dsa-4133"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.isc.org/isc-projects/dhcp","events":[{"introduced":"079f747eb20d40e80c65e8a984d6c50860560b3c"},{"last_affected":"8541c4fcbc6364800775234bacfe646ef16bfd38"},{"introduced":"5de62c8b34a94e66269b39c663cd222047216306"},{"last_affected":"c1bd79a15e9b689e8a18538aaedec0ab8bd04b17"},{"introduced":"b39dd193dc3d189d3669866d73a87172545e2a4b"},{"last_affected":"075a2f45da9a3194c9ea2c72b2167d9bb5bd0c21"}],"database_specific":{"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r10:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r10_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r10_rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r11:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r11_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc2:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r12:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r12_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r12_p1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r13:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r13_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r14:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r14_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r15:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r7:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r8:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r8_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r8_rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r9:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r9_b1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1-esv:r9_rc1:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.1.0:-:*:*:*:*:*:*","cpe:2.3:a:isc:dhcp:4.4.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"4.2.0"},{"last_affected":"4.2.8"},{"introduced":"4.3.0"},{"last_affected":"4.3.6"},{"introduced":"4.1-esv-NA"},{"last_affected":"4.1-esv-NA"},{"introduced":"4.1-esv-r1"},{"last_affected":"4.1-esv-r1"},{"introduced":"4.1-esv-r10"},{"last_affected":"4.1-esv-r10"},{"introduced":"4.1-esv-r10_b1"},{"last_affected":"4.1-esv-r10_b1"},{"introduced":"4.1-esv-r10_rc1"},{"last_affected":"4.1-esv-r10_rc1"},{"introduced":"4.1-esv-r11"},{"last_affected":"4.1-esv-r11"},{"introduced":"4.1-esv-r11_b1"},{"last_affected":"4.1-esv-r11_b1"},{"introduced":"4.1-esv-r11_rc1"},{"last_affected":"4.1-esv-r11_rc1"},{"introduced":"4.1-esv-r11_rc2"},{"last_affected":"4.1-esv-r11_rc2"},{"introduced":"4.1-esv-r12"},{"last_affected":"4.1-esv-r12"},{"introduced":"4.1-esv-r12_b1"},{"last_affected":"4.1-esv-r12_b1"},{"introduced":"4.1-esv-r12_p1"},{"last_affected":"4.1-esv-r12_p1"},{"introduced":"4.1-esv-r13"},{"last_affected":"4.1-esv-r13"},{"introduced":"4.1-esv-r13_b1"},{"last_affected":"4.1-esv-r13_b1"},{"introduced":"4.1-esv-r14"},{"last_affected":"4.1-esv-r14"},{"introduced":"4.1-esv-r14_b1"},{"last_affected":"4.1-esv-r14_b1"},{"introduced":"4.1-esv-r15"},{"last_affected":"4.1-esv-r15"},{"introduced":"4.1-esv-r2"},{"last_affected":"4.1-esv-r2"},{"introduced":"4.1-esv-r3"},{"last_affected":"4.1-esv-r3"},{"introduced":"4.1-esv-r3_b1"},{"last_affected":"4.1-esv-r3_b1"},{"introduced":"4.1-esv-r4"},{"last_affected":"4.1-esv-r4"},{"introduced":"4.1-esv-r5"},{"last_affected":"4.1-esv-r5"},{"introduced":"4.1-esv-r5_b1"},{"last_affected":"4.1-esv-r5_b1"},{"introduced":"4.1-esv-r5_rc1"},{"last_affected":"4.1-esv-r5_rc1"},{"introduced":"4.1-esv-r5_rc2"},{"last_affected":"4.1-esv-r5_rc2"},{"introduced":"4.1-esv-r6"},{"last_affected":"4.1-esv-r6"},{"introduced":"4.1-esv-r7"},{"last_affected":"4.1-esv-r7"},{"introduced":"4.1-esv-r8"},{"last_affected":"4.1-esv-r8"},{"introduced":"4.1-esv-r8_b1"},{"last_affected":"4.1-esv-r8_b1"},{"introduced":"4.1-esv-r8_rc1"},{"last_affected":"4.1-esv-r8_rc1"},{"introduced":"4.1-esv-r9"},{"last_affected":"4.1-esv-r9"},{"introduced":"4.1-esv-r9_b1"},{"last_affected":"4.1-esv-r9_b1"},{"introduced":"4.1-esv-r9_rc1"},{"last_affected":"4.1-esv-r9_rc1"},{"introduced":"4.1.0-NA"},{"last_affected":"4.1.0-NA"},{"introduced":"4.4.0"},{"last_affected":"4.4.0"}]}}],"versions":["4.1-esv-NA","4.1-esv-r1","4.1-esv-r10","4.1-esv-r10_b1","4.1-esv-r10_rc1","4.1-esv-r11","4.1-esv-r11_b1","4.1-esv-r11_rc1","4.1-esv-r11_rc2","4.1-esv-r12","4.1-esv-r12_b1","4.1-esv-r13","4.1-esv-r13_b1","4.1-esv-r14","4.1-esv-r14_b1","4.1-esv-r15","4.1-esv-r2","4.1-esv-r3","4.1-esv-r3_b1","4.1-esv-r4","4.1-esv-r5","4.1-esv-r5_b1","4.1-esv-r5_rc1","4.1-esv-r5_rc2","4.1-esv-r6","4.1-esv-r7","4.1-esv-r8","4.1-esv-r8_b1","4.1-esv-r8_rc1","4.1-esv-r9","4.1-esv-r9_b1","4.1-esv-r9_rc1","4.1.0-NA","4.4.0","v4_3_6","v4_4_0","v4_4_0b1_f1","v4_3_6b1","v4_3_5","v4_3_5b1","v4_3_4","v4_3_3","v4_3_3b1","v4_2_8","v4_3_2","v4_2_8_rc2","v4_3_2rc2","v4_2_8rc1","v4_3_2rc1","v4_2_8b1","v4_3_2b1","v4_3_2.pre-beta","v4_2_7","v4_3_1","v4_3_1rc1","v4_2_7rc1","v4_2_7b1","v4_3_1b1","v4_2_6","v4_3_0","v4_2_6rc1","v4_2_6b1","v4_2_5","v4_2_5rc1","v4_2_5b1","v4_2_4","v4_2_4rc2","v4_2_4rc1","v4_2_4b1","v4_2_3","v4_2_3rc1","v4_2_2","v4_2_2rc1","v4_2_2b1","v4_2_1_P1","v4_2_1","v4_2_1rc1","v4_2_1b1","v4_2_0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-5733.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}