CVE-2018-5732
Estado: ModificadaAlta (7.5)—
Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a response containing a specially constructed options section. Affects ISC DHCP versions 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 5.24%
- Percentil entre todas las CVEs puntuadas: 92
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-119
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2018-5732",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Secondary",
"source": "security-officer@isc.org",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "security-officer@isc.org",
"affectedData": [
{
"vendor": "ISC",
"product": "ISC DHCP",
"versions": [
{
"status": "affected",
"version": "ISC DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0"
}
]
}
]
}
],
"published": "2019-10-09T16:15:13.407",
"references": [
{
"url": "https://kb.isc.org/docs/aa-01565",
"tags": [
"Vendor Advisory"
],
"source": "security-officer@isc.org"
},
{
"url": "https://kb.isc.org/docs/aa-01565",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a response containing a specially constructed options section. Affects ISC DHCP versions 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0"
},
{
"lang": "es",
"value": "Un fallo al comprobar apropiadamente los límites de un búfer usado para procesar las opciones de DHCP, permite a un servidor malicioso (o a una entidad que se hace pasar por un servidor) causar un desbordamiento del búfer (y el bloqueo resultante) en dhclient mediante el envío de una respuesta que contiene una sección de opciones especialmente construida. Afecta a ISC DHCP versiones 4.1.0 hasta 4.1-ESV-R15, 4.2.0 hasta 4.2.8, 4.3.0 hasta 4.3.6, y 4.4.0."
}
],
"lastModified": "2026-06-17T02:00:40.577",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A611E97-A264-4B4C-93CE-7FC01FE5F708",
"versionEndIncluding": "4.1.2",
"versionStartIncluding": "4.1.0"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "257C8915-697E-4274-8BCB-43B690FA5C96",
"versionEndExcluding": "4.2.8",
"versionStartIncluding": "4.2.0"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "341617C4-C370-44AD-9138-14EBB3A758F1",
"versionEndExcluding": "4.3.6",
"versionStartIncluding": "4.3.0"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F27D0660-2F07-430B-A651-5D0B6AA763C0"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FBAABA4E-0D34-4644-AC26-E272CEE6C361"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "179443DC-4B6A-408A-8BE5-B3E72188F43E"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r10b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA5FAE54-1645-4A38-A431-10E67304399A"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r10rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C0D1A71-CECB-4C86-87F6-EB3741BDF692"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r11:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ADF80D19-3B0A-4A74-944E-F33CCC30EADA"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r11b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E01D88D-876D-45FE-B7ED-089DAD801EF6"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r11rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4B030B1-F008-4562-93C7-7E1C6D3D00F4"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r11rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF656F5E-B317-4E0C-BF01-EC2A917142DC"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r12:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FBA64EEC-C0C7-4F11-8131-2868691E54DB"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r12-p1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FFD3109A-1D76-4EA7-BF39-0B203AD945CF"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r12b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2156D1BC-90AE-4AF3-964C-DAC7DCE14A5D"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r13:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A157E664-6ACE-44CE-AC07-64898B182EA1"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r13b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA8ADA07-94FA-4014-AF70-8FCAF5F0DB03"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r14:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D21F05D-246F-41F5-81FD-286C26168E2E"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r14b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2E0124D-6330-4013-8145-4309FDAE60A8"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r15:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "924E91FF-495F-4963-827F-57F7340C6560"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5E2FFC7-6E73-463E-846C-C403E41A2022"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E9D08285-745D-40AB-9A78-F467712CDA5A"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r3b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C19C3B91-215D-4697-84D9-13CC18445C82"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79F235F0-AD16-4E5B-AB60-97F0BB86AEB6"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E84D5E5B-0336-4166-AAAC-49375E3AF971"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4EF0CF57-C49C-4801-B4E1-7D82C3F6E3A2"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8290ECB4-3B70-4126-BF10-68A5A863E297"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r5rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D35C997-593E-4994-9501-2010D98459D8"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65E0296F-3522-4B43-AF34-CFE1AE7EEC1E"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69F6E619-A52B-4A60-8247-41ADD0E7D655"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA48EBAA-10B7-43D6-9A27-99F2578DF7F6"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r8b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9421E40A-FF8D-426B-99A0-24DCD8D9B39D"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r8rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81BB427C-AE69-4BFB-B956-F62373FA1EFC"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r9:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7DABD43E-818A-4B21-B4E7-753056D4A184"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r9b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A08F801-2A32-492F-BAB4-8E32E9981CAC"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1-esv:r9rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2FDBA4F-CDE8-4767-8C41-328FF9ACB2EB"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.1.2:p1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA5D825C-B72A-44F5-AF24-4F3200881ABA"
},
{
"criteria": "cpe:2.3:a:isc:dhcp:4.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13C8AD22-6E39-4899-88B2-7ED44BE890A6"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "security-officer@isc.org"
}