PT-2016-5211
CVE-2016-2774
·
Published
2016-03-09
·
Updated
2020-01-08
Description by
CVSS 2.0
7.1
HighMetricsAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
ISC DHCP versions 4.1.x through 4.1-ESV-R12
ISC DHCP versions 4.2.x through 4.3.3
Description
The issue allows remote attackers to cause a denial of service by establishing many TCP sessions, due to the lack of restriction on the number of concurrent TCP sessions. This can lead to an INSIST assertion failure or a request-processing outage.
Recommendations
For ISC DHCP versions 4.1.x through 4.1-ESV-R12, update to version 4.1-ESV-R13 or later.
For ISC DHCP versions 4.2.x through 4.3.3, update to version 4.3.4 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾