Known vulnerabilities in DHCP

Vendor: ISC
Software: DHCP
Software CPE: cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:*
Total vulnerabilities: 18
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DHCP DHCP is affected by 18 known vulnerabilities: 10 medium, 8 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67944 - Improper input validation
CVE-2022-2928
CWE-20 Low
No
No
4.1-ESV-R16-P2, 4.4.3-P1 05.10.2022 SB2022100544
SB2022100545
SB2022100547
and 28 more
#VU67943 - Missing release of memory after effective lifetime
CVE-2022-2929
CWE-401 Medium
No
No
4.1-ESV-R16-P2, 4.4.3-P1 05.10.2022 SB2022100544
SB2022100545
SB2022100547
and 26 more
#VU53609 - Improper input validation
CVE-2021-25217
CWE-20 Medium
No
No
4.1-ESV-R16-P1, 4.4.2-P1 27.05.2021 SB2021052708
SB2021052808
SB2021052902
and 38 more
#VU20341 - Improper input validation
CVE-2019-6470
CWE-20 Low
No
No
4.4.1 20.08.2019 SB2019082008
SB2019080633
SB2019102001
and 5 more
#VU12743 - Command injection
CVE-2018-1111
CWE-77 Low
Available
No
- 16.05.2018 SB2018051602
SB2018051724
SB2018051726
and 12 more
#VU10791 - Memory corruption
CVE-2018-5733
CWE-119 Low
No
No
- 01.03.2018 SB2018030103
SB2018030201
SB2018030502
and 12 more
#VU10790 - Buffer overflow
CVE-2018-5732
CWE-120 Low
No
No
- 01.03.2018 SB2018030103
SB2018030201
SB2018030501
and 14 more
#VU10031 - Resource exhaustion
CVE-2017-3144
CWE-400 Low
No
No
- 17.01.2018 SB2018011704
SB2018012602
SB2018030801
and 6 more
#VU32355 - Improper input validation
CVE-2015-8605
CWE-20 Medium
No
No
- 15.01.2016 SB2016011507
SB2016011510
SB2016011804
and 4 more
#VU42941 - Memory corruption
CVE-2013-2494
CWE-119 Low
No
No
- 28.03.2013 SB2013032804
SB2014010611
#VU33931 - Improper input validation
CVE-2012-3955
CWE-20 Medium
No
No
- 14.09.2012 SB2012091402
SB2012103109
SB2013030203
and 1 more
#VU32777 - Memory corruption
CVE-2012-3571
CWE-119 Medium
No
No
4.2.5 25.07.2012 SB2012072511
SB2012080203
SB2012080301
#VU43785 - Memory corruption
CVE-2012-3570
CWE-119 Medium
No
No
- 25.07.2012 SB2012072518
#VU32778 - Resource Management Errors
CVE-2012-3954
CWE-399 Low
No
No
- 25.07.2012 SB2012072512
SB2012080204
SB2012080301
and 1 more
#VU44406 - NULL Pointer Dereference
CVE-2011-4868
CWE-476 Medium
No
No
- 15.01.2012 SB2012011501
SB2012082505
#VU32838 - Improper input validation
CVE-2011-4539
CWE-20 Medium
No
No
- 08.12.2011 SB2011120802
SB2011121606
SB2012010509
and 1 more
#VU45400 - Improper input validation
CVE-2011-0413
CWE-20 Medium
No
No
- 31.01.2011 SB2011013101
#VU33982 - Improper input validation
CVE-2010-2156
CWE-20 Medium
Available
No
- 07.06.2010 SB2010060701
SB2010070701