CVE-2016-2774 PUBLISHED

ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to cause a denial of service (INSIST assertion failure or request-processing outage) by establishing many sessions.

EPSS 56.98% · 98.1th percentile

Risk Scores

EPSS Score
56.98%
98.1th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSisc-dhcp4.3.3-5ubuntu12.7, 4.3.1-5ubuntu4, 4.3.1-5ubuntu5
Ubuntu:14.04:LTSisc-dhcp4.2.4-7ubuntu8, 4.2.4-7ubuntu9, 4.2.4-7ubuntu10

Timeline

References

Open in Interactive Console →