The issue is caused by an integer signedness error that allows remote attackers to cause a denial of service, specifically IP lease depletion, via a DHCP request. This request has the LEASETIME option set to -1, making the DHCP lease valid for thirteen or more years.