← Vulnerability feed

Vulnerability record · CVE-2018-5732 · published 9 October 2019

CVE-2018-5732: Isc dhcp memory buffer overflow vulnerability

Isc · Dhcp

Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a response containing a specially constructed options section. Affects ISC DHCP versions 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0

7.5 CVSS 3.1 High EPSS 5.2% · top 7.8% CWE-119 · Memory buffer overflow
7.5CVSS 3.1 base score, v2 5.0
5.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a response containing a specially constructed options section. Affects ISC DHCP versions 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://kb.isc.org/docs/aa-01565 Vendor Advisory
https://kb.isc.org/docs/aa-01565 Vendor Advisory

Track CVE-2018-5732 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2009-0692Isc dhcp memory buffer overflow vulnerabilityStack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 b…EPSS 26%7.8CVE-2011-2748Isc dhcp improper input validation vulnerabilityThe server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial o…EPSS 39%7.8CVE-2011-2749Isc dhcp improper input validation vulnerabilityThe server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial o…EPSS 39%7.8CVE-2011-0413Isc dhcp improper input validation vulnerabilityThe DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attacker…EPSS 33%7.5CVE-2017-3144ISC DHCP OMAPI connection cleanup failure exhausts socket descriptorsISC DHCP fails to properly clean up closed OMAPI connections, so socket descriptors are not released back to the server's pool. Repeated connections …EPSS 73%analysed7.5CVE-2018-5733Isc dhcp integer overflow vulnerabilityA malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a 32-bit ref…EPSS 20%7.5CVE-2011-0997ISC DHCP dhclient command injection via DHCP hostnamedhclient in ISC DHCP 3.0.x through 4.2.x (before 4.2.1-P1), 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 fails to validate the hostname o…EPSS 84%analysed7.4CVE-2021-25217Isc dhcp memory buffer overflow vulnerabilityIn ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases …EPSS 6.1%

Source: NIST National Vulnerability Database (record CVE-2018-5732), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.