6.5

CVE-2022-2928

In ISC DHCP 4.4.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called from add_option(), it increases the option's refcount field. However, there is not a corresponding call to option_dereference() to decrement the refcount field. The function add_option() is only used in server responses to lease query packets. Each lease query response calls this function for several options, so eventually, the reference counters could overflow and cause the server to abort.

Data is provided by the National Vulnerability Database (NVD)
Isc ≫ Dhcp Version >= 4.4.0 <= 4.4.3
Isc ≫ Dhcp Version4.1-esv Updater1
Isc ≫ Dhcp Version4.1-esv Updater10
Isc ≫ Dhcp Version4.1-esv Updater10_b1
Isc ≫ Dhcp Version4.1-esv Updater10_rc1
Isc ≫ Dhcp Version4.1-esv Updater10b1
Isc ≫ Dhcp Version4.1-esv Updater10rc1
Isc ≫ Dhcp Version4.1-esv Updater11
Isc ≫ Dhcp Version4.1-esv Updater11_b1
Isc ≫ Dhcp Version4.1-esv Updater11_rc1
Isc ≫ Dhcp Version4.1-esv Updater11_rc2
Isc ≫ Dhcp Version4.1-esv Updater11b1
Isc ≫ Dhcp Version4.1-esv Updater11rc1
Isc ≫ Dhcp Version4.1-esv Updater11rc2
Isc ≫ Dhcp Version4.1-esv Updater12
Isc ≫ Dhcp Version4.1-esv Updater12-p1
Isc ≫ Dhcp Version4.1-esv Updater12_b1
Isc ≫ Dhcp Version4.1-esv Updater12_p1
Isc ≫ Dhcp Version4.1-esv Updater12b1
Isc ≫ Dhcp Version4.1-esv Updater13
Isc ≫ Dhcp Version4.1-esv Updater13_b1
Isc ≫ Dhcp Version4.1-esv Updater13b1
Isc ≫ Dhcp Version4.1-esv Updater14
Isc ≫ Dhcp Version4.1-esv Updater14_b1
Isc ≫ Dhcp Version4.1-esv Updater14b1
Isc ≫ Dhcp Version4.1-esv Updater15
Isc ≫ Dhcp Version4.1-esv Updater15-p1
Isc ≫ Dhcp Version4.1-esv Updater15_b1
Isc ≫ Dhcp Version4.1-esv Updater16
Isc ≫ Dhcp Version4.1-esv Updater16-p1
Debian ≫ Debian Linux Version10.0
Fedoraproject ≫ Fedora Version35
Fedoraproject ≫ Fedora Version36
Fedoraproject ≫ Fedora Version37
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.03% 0.089
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
security-officer@isc.org 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.