Memory corruption in DHCP - CVE-2018-5733

Vulnerability identifier: #VU10791

CSH Severity: Low

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-5733

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists in the dhcpd due to improper handling of reference counting when processing client requests. A remote attacker can send large amounts of data to the target server can send a large number of packets, trigger a reference counter overflow and cause the target dhcpd service to consume all available memory and crash.

DHCP
Arch Linux
Debian Linux
Amazon Linux AMI
Gentoo Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux for Power
Slackware Linux
Fedora
Dell EMC PowerProtect Data Protection
Dynamic System Analysis (DSA) Preboot
Integrated Management Module II (IMM2) for BladeCenter Systems
SmartFabric OS10
dhcp (Alpine package)
dhcp
System x Integrated Management Module (IMM2)
Flex System Integrated Management Module (IMM2)
Flex System Chassis Management Module (CMM)

Update to versions 4.1-ESV-R15-P1, 4.3.6-P1 or 4.4.1.

Dell EMC PowerProtect Data Protection - update to 2.7.8
Dynamic System Analysis (DSA) Preboot - update to dsyte2z-9.65
System x Integrated Management Module (IMM2) - update to 1AOO84C-6.80
Flex System Integrated Management Module (IMM2) - update to 1AOO84C-6.80
Integrated Management Module II (IMM2) for BladeCenter Systems - update to 1AOO84C-6.80-bc
Flex System Chassis Management Module (CMM) - update to 2pet16c-2.5.12c
dhcp - update to 4.3.6-9.fc27
SmartFabric OS10 - update to 10.5.6.1

• https://kb.isc.org/article/AA-01567/0/CVE-2018-5733%3A-A-malicious-client-can-overflow-a-reference-c...

• Denial of service in ISC dhcpd
• Slackware Linux update for dhcp
• Arch Linux update for dhcp
• Debian update for isc-dhcp
• Amazon Linux AMI update for dhcp
• Gentoo update for ISC DHCP
• Red Hat update for dhcp
• Red Hat update for dhcp
• Memory corruption in dhcp (Alpine package)
• Multiple vulnerabilities in Dell Networking OS10
• Multiple vulnerabilities in IBM Dynamic System Analysis (DSA) Preboot
• Multiple vulnerabilities in IBM Flex System Chassis Management Module (CMM)
• Multiple vulnerabilities in IBM Integrated Management Module II (IMM2)
• PowerProtect Data Protection software update for third-party components
• Fedora 27 update for dhcp