PT-2016-5211

CVE-2016-2774

·

Published

2016-03-09

·

Updated

2020-01-08

Description by

CVSS 2.0
7.1
High
MetricsAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions ISC DHCP versions 4.1.x through 4.1-ESV-R12 ISC DHCP versions 4.2.x through 4.3.3
Description The issue allows remote attackers to cause a denial of service by establishing many TCP sessions, due to the lack of restriction on the number of concurrent TCP sessions. This can lead to an INSIST assertion failure or a request-processing outage.
Recommendations For ISC DHCP versions 4.1.x through 4.1-ESV-R12, update to version 4.1-ESV-R13 or later. For ISC DHCP versions 4.2.x through 4.3.3, update to version 4.3.4 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2017-2138
CESA-2016_2590
DLA-2003-1
RHSA-2016:2590
RHSA-2016_2590
SUSE-SU-2016:1692-1
SUSE-SU-2016_1692-1
SUSE-SU-2016:1735-1
SUSE-SU-2016_1735-1
SUSE-SU-2016:1791-1
SUSE-SU-2016_1791-1
SUSE-SU-2016:2024-1
SUSE-SU-2016_2024-1
USN-3586-1
Found an issue in the description? Have something to add? Feel free to write us 👾