The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0483 advisory.

  - dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server     (CVE-2018-5732)

  - dhcp: Reference count overflow in dhcpd allows denial of service (CVE-2018-5733)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

New dhcp packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues.

This update for dhcp fixes the following issues :

Security issues fixed :

CVE-2018-5733: reference count overflow in dhcpd (bsc#1083303).

CVE-2018-5732: buffer overflow in dhclient (bsc#1083302).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2018-5732 CVE-2018-5733

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for dhcp is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network.

Security Fix(es) :

* dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server (CVE-2018-5732)

* dhcp: Reference count overflow in dhcpd allows denial of service (CVE-2018-5733)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank ISC for reporting these issues. Upstream acknowledges Felix Wilhelm (Google) as the original reporter of these issues.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0483 advisory.

    - Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for dhcp is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network.

Security Fix(es) :

* dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server (CVE-2018-5732)

* dhcp: Reference count overflow in dhcpd allows denial of service (CVE-2018-5733)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank ISC for reporting these issues. Upstream acknowledges Felix Wilhelm (Google) as the original reporter of these issues.

According to the versions of the dhcp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An out-of-bound memory access flaw was found in the way     dhclient processed a DHCP response packet. A malicious     DHCP server could potentially use this flaw to crash     dhclient processes running on DHCP client machines via     a crafted DHCP response packet.(CVE-2018-5732)

  - A denial of service flaw was found in the way dhcpd     handled reference counting when processing client     requests. A malicious DHCP client could use this flaw     to trigger a reference count overflow on the server     side, potentially causing dhcpd to crash, by sending     large amounts of traffic.(CVE-2018-5733)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the dhcp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An out-of-bound memory access flaw was found in the way     dhclient processed a DHCP response packet. A malicious     DHCP server could potentially use this flaw to crash     dhclient processes running on DHCP client machines via     a crafted DHCP response packet.(CVE-2018-5732)

  - A denial of service flaw was found in the way dhcpd     handled reference counting when processing client     requests. A malicious DHCP client could use this flaw     to trigger a reference count overflow on the server     side, potentially causing dhcpd to crash, by sending     large amounts of traffic.(CVE-2018-5733)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - Added oracle-errwarn-message.patch

  - Resolves: #1570897 - Fix comamnd execution in NM script     (CVE-2018-1111)

  - Resolves: #1550085 - CVE-2018-5733 Avoid reference     overflow

<[12:4.1.1-53.P1.2

  - Resolves: #1550083 - CVE-2018-5732 Avoid options buffer     overflow

  - Resolves: #1063217 - failover hangs with both     potential-conflict

An update of the dhcp package has been released.

Buffer overflow in dhclient possibly allowing code execution triggered by malicious server

An out-of-bound memory access flaw was found in the way dhclient processed a DHCP response packet. A malicious DHCP server could potentially use this flaw to crash dhclient processes running on DHCP client machines via a crafted DHCP response packet. (CVE-2018-5732)

Reference count overflow in dhcpd allows denial of service

A denial of service flaw was found in the way dhcpd handled reference counting when processing client requests. A malicious DHCP client could use this flaw to trigger a reference count overflow on the server side, potentially causing dhcpd to crash, by sending large amounts of traffic. (CVE-2018-5733)

This update for dhcp fixes the following issues: Security issues fixed :

  - CVE-2018-5733: reference count overflow in dhcpd     (bsc#1083303).

  - CVE-2018-5732: buffer overflow in dhclient     (bsc#1083302).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP     server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC     DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0. (CVE-2018-5733)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-2613:02 advisory.

    * dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server     (CVE-2018-5732)
      * dhcp: Reference count overflow in dhcpd allows denial of service (CVE-2018-5733)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the dhcp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x     before 4.3.3-P1 allows remote attackers to cause a     denial of service (application crash) via an invalid     length field in a UDP IPv4 packet.(CVE-2015-8605)

  - A denial of service flaw was found in the way dhcpd     handled reference counting when processing client     requests. A malicious DHCP client could use this flaw     to trigger a reference count overflow on the server     side, potentially causing dhcpd to crash, by sending     large amounts of traffic.(CVE-2018-5733)

  - An out-of-bound memory access flaw was found in the way     dhclient processed a DHCP response packet. A malicious     DHCP server could potentially use this flaw to crash     dhclient processes running on DHCP client machines via     a crafted DHCP response packet.(CVE-2018-5732)

  - A resource-consumption flaw was discovered in the DHCP     server. dhcpd did not restrict the number of open     connections to OMAPI and failover ports. A remote     attacker able to establish TCP connections to one of     these ports could use this flaw to cause dhcpd to exit     unexpectedly, stop responding requests, or exhaust     system sockets (denial of service).(CVE-2016-2774)

  - It was found that the DHCP daemon did not properly     clean up closed OMAPI connections in certain cases. A     remote attacker able to connect to the OMAPI port could     use this flaw to exhaust file descriptors in the DHCP     daemon, leading to a denial of service in the OMAPI     functionality.(CVE-2017-3144)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
108274	RHEL 7 : dhcp (RHSA-2018:0483)	Nessus	Red Hat Local Security Checks	2018/3/13	2025/2/4	high
107102	Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : dhcp (SSA:2018-060-01)	Nessus	Slackware Local Security Checks	2018/3/2	2025/10/27	high
118346	SUSE SLES11 Security Update : dhcp (SUSE-SU-2018:0810-2)	Nessus	SuSE Local Security Checks	2018/10/24	2024/7/29	high
107138	Fedora 27 : 12:dhcp (2018-5051dbd15e)	Nessus	Fedora Local Security Checks	2018/3/6	2025/10/27	high
107275	CentOS 6 : dhcp (CESA-2018:0469)	Nessus	CentOS Local Security Checks	2018/3/12	2025/10/24	high
108273	Oracle Linux 7 : dhcp (ELSA-2018-0483)	Nessus	Oracle Linux Local Security Checks	2018/3/13	2025/2/4	high
108338	CentOS 7 : dhcp (CESA-2018:0483)	Nessus	CentOS Local Security Checks	2018/3/15	2025/1/31	high
117559	EulerOS Virtualization 2.5.0 : dhcp (EulerOS-SA-2018-1250)	Nessus	Huawei Local Security Checks	2018/9/18	2024/8/7	high
109470	EulerOS 2.0 SP1 : dhcp (EulerOS-SA-2018-1072)	Nessus	Huawei Local Security Checks	2018/5/2	2024/10/15	high
109471	EulerOS 2.0 SP2 : dhcp (EulerOS-SA-2018-1073)	Nessus	Huawei Local Security Checks	2018/5/2	2024/10/15	high
109830	OracleVM 3.3 / 3.4 : dhcp (OVMSA-2018-0042)	Nessus	OracleVM Local Security Checks	2018/5/16	2025/4/1	high
202774	Photon OS 3.0: Dhcp PHSA-2019-3.0-0016	Nessus	PhotonOS Local Security Checks	2024/7/22	2024/7/24	high
108847	Amazon Linux AMI : dhcp (ALAS-2018-984)	Nessus	Amazon Linux Local Security Checks	2018/4/6	2024/11/20	high
108655	SUSE SLED12 / SLES12 Security Update : dhcp (SUSE-SU-2018:0812-1)	Nessus	SuSE Local Security Checks	2018/3/27	2024/12/3	high
221911	Linux Distros Unpatched Vulnerability : CVE-2018-5733	Nessus	Misc.	2025/3/4	2026/8/5	high
289974	MiracleLinux 7 : dhcp-4.2.5-58.3.0.1.el7.AXS7 (AXSA:2018-2613:02)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
124946	EulerOS Virtualization 3.0.1.0 : dhcp (EulerOS-SA-2019-1443)	Nessus	Huawei Local Security Checks	2019/5/14	2022/5/20	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high