CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-2774

ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to cause a denial of service (INSIST assertion failure or request-processing outage) by establishing many sessions.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.46

EPSS Ranking 97.5%

CVSS Severity

CVSS v3 Score 5.9

CVSS v2 Score 7.1

References

Products affected by CVE-2016-2774

Isc » Dhcp » Version: 4.1-esv

cpe:2.3:a:isc:dhcp:4.1-esv
Isc » Dhcp » Version: 4.1.0

cpe:2.3:a:isc:dhcp:4.1.0
Isc » Dhcp » Version: 4.1.1

cpe:2.3:a:isc:dhcp:4.1.1
Isc » Dhcp » Version: 4.1.2

cpe:2.3:a:isc:dhcp:4.1.2
Isc » Dhcp » Version: 4.2.0

cpe:2.3:a:isc:dhcp:4.2.0
Isc » Dhcp » Version: 4.2.1

cpe:2.3:a:isc:dhcp:4.2.1
Isc » Dhcp » Version: 4.2.2

cpe:2.3:a:isc:dhcp:4.2.2
Isc » Dhcp » Version: 4.2.3

cpe:2.3:a:isc:dhcp:4.2.3
Isc » Dhcp » Version: 4.2.4

cpe:2.3:a:isc:dhcp:4.2.4
Isc » Dhcp » Version: 4.2.5

cpe:2.3:a:isc:dhcp:4.2.5
Isc » Dhcp » Version: 4.2.6

cpe:2.3:a:isc:dhcp:4.2.6
Isc » Dhcp » Version: 4.2.7

cpe:2.3:a:isc:dhcp:4.2.7
Isc » Dhcp » Version: 4.2.8

cpe:2.3:a:isc:dhcp:4.2.8
Isc » Dhcp » Version: 4.3.0

cpe:2.3:a:isc:dhcp:4.3.0
Isc » Dhcp » Version: 4.3.1

cpe:2.3:a:isc:dhcp:4.3.1
Isc » Dhcp » Version: 4.3.2

cpe:2.3:a:isc:dhcp:4.3.2
Isc » Dhcp » Version: 4.3.3

cpe:2.3:a:isc:dhcp:4.3.3
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 17.10

cpe:2.3:o:canonical:ubuntu_linux:17.10
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-2774

Products

Pricing

Contact Us