Known vulnerabilities in dhcp (Red Hat package)
Vendor:
Red Hat Inc.
Software:
dhcp (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:dhcp_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
9
Public exploits:
2
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
4.1.1-31.P1.el6_3.1
3.0.5-31.el5_8.1
4.1.1-25.P1.el6_2.1
4.1.1-12.P1.el6_0.2
4.1.1-12.P1.el6_0.1
3.0.1-62.el4_7.1
3.0.1-65.el4_8.1
4.2.5-83.el7_9.2
4.3.6-50.el8_10
4.3.6-40.el8_2.3
4.3.6-44.el8_4.3
4.3.6-49.el8_8.1
4.3.6-47.el8_6.2
4.3.6-49.el8_9.1
4.3.6-49.el8
4.4.2-18.b1.el9
4.4.2-17.b1.el9
4.2.5-69.el7_6.1
4.3.6-40.el8_2.2
4.2.5-42.el7_2.2
4.3.6-34.el8_1.2
4.2.5-47.el7_3.2
4.2.5-58.el7_4.5
4.1.1-64.P1.el6_10
4.2.5-77.el7_7.1
4.3.6-44.el8_4.1
4.2.5-83.el7_9.1
4.3.6-34.el8
4.2.5-77.el7
3.0.1-67.el4
3.0.1-68.el4
4.1.1-34.P1.el6
4.2.5-47.el7
4.2.5-58.el7_4
Vulnerabilities (9)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU86383 - Resource exhaustion CVE-2023-4408 |
CWE-400 | Medium | 4.2.5-83.el7_9.2, 4.3.6-40.el8_2.3, 4.3.6-44.el8_4.3, 4.3.6-47.el8_6.2, 4.3.6-49.el8_8.1, 4.3.6-49.el8_9.1, 4.3.6-50.el8_10 | 13.02.2024 |
SB2024021329 SB2024021330 SB2024021347 and 82 more |
||
| #VU86378 - Resource exhaustion CVE-2023-50868 |
CWE-400 | Medium | 4.2.5-83.el7_9.2, 4.3.6-40.el8_2.3, 4.3.6-44.el8_4.3, 4.3.6-47.el8_6.2, 4.3.6-49.el8_8.1, 4.3.6-49.el8_9.1, 4.3.6-50.el8_10 | 13.02.2024 |
SB2024021325 SB2024021330 SB2024021329 and 143 more |
||
| #VU86377 - Resource exhaustion CVE-2023-50387 |
CWE-400 | Medium | 4.2.5-83.el7_9.2, 4.3.6-40.el8_2.3, 4.3.6-44.el8_4.3, 4.3.6-47.el8_6.2, 4.3.6-49.el8_8.1, 4.3.6-49.el8_9.1, 4.3.6-50.el8_10 | 13.02.2024 |
SB2024021325 SB2024021330 SB2024021329 and 145 more |
||
| #VU71529 - Resource exhaustion CVE-2022-3094 |
CWE-400 | Medium | 4.3.6-47.el8_6.2 | 25.01.2023 |
SB2023012556 SB2023012559 SB2023012602 and 47 more |
||
| #VU67944 - Improper input validation CVE-2022-2928 |
CWE-20 | Low | 4.3.6-49.el8, 4.4.2-18.b1.el9 | 05.10.2022 |
SB2022100544 SB2022100545 SB2022100547 and 28 more |
||
| #VU67943 - Missing release of memory after effective lifetime CVE-2022-2929 |
CWE-401 | Medium | 4.3.6-49.el8, 4.4.2-18.b1.el9 | 05.10.2022 |
SB2022100544 SB2022100545 SB2022100547 and 26 more |
||
| #VU67545 - Resource Management Errors CVE-2022-2795 |
CWE-399 | Medium | 4.3.6-47.el8_6.2 | 21.09.2022 |
SB2022092131 SB2022092140 SB2022092143 and 71 more |
||
| #VU61422 - Reliance on Reverse DNS Resolution for a Security-Critical Action CVE-2021-25220 |
CWE-350 | Medium | 4.3.6-47.el8_6.2, 4.4.2-17.b1.el9 | 17.03.2022 |
SB2022031701 SB2022031719 SB2022031725 and 57 more |
||
| #VU53609 - Improper input validation CVE-2021-25217 |
CWE-20 | Medium | 4.1.1-64.P1.el6_10, 4.2.5-42.el7_2.2, 4.2.5-47.el7_3.2, 4.2.5-58.el7_4.5, 4.2.5-69.el7_6.1, 4.2.5-77.el7_7.1, 4.2.5-83.el7_9.1, 4.3.6-34.el8_1.2, 4.3.6-40.el8_2.2, 4.3.6-44.el8_4.1 | 27.05.2021 |
SB2021052708 SB2021052808 SB2021052902 and 38 more |