CVSS: 7.5EPSS: 0%CPEs: 7EXPL: 1CVE-2019-6470 – dhcpd: use-after-free error leads crash in IPv6 mode when using mismatched BIND libraries
https://notcve.org/view.php?id=CVE-2019-6470
13 May 2019 — There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC softwa... • https://access.redhat.com/errata/RHSA-2019:2060 • CWE-20: Improper Input Validation •
CVSS: 10.0EPSS: 7%CPEs: 22EXPL: 0CVE-2004-1006
https://notcve.org/view.php?id=CVE-2004-1006
19 Nov 2004 — Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702. • http://archives.neohapsis.com/archives/bugtraq/2004-10/0287.html •
CVSS: 9.8EPSS: 12%CPEs: 9EXPL: 0CVE-2003-0026
https://notcve.org/view.php?id=CVE-2003-0026
16 Jan 2003 — Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname. Múltiples desbordamientos de búfer en la pila en las rutinas de manejo de errores de la libreria minires, como es usada en la capacidad NSUPDATE de ISC DHCPD 3.0 A 3.0.1RC10, permite a atacantes remotos ejecutar código arbitrario mediante un mensaje D... • http://archives.neohapsis.com/archives/bugtraq/2003-01/0250.html •
CVSS: 10.0EPSS: 37%CPEs: 9EXPL: 1CVE-2002-0702 – ISC DHCPD 2.0/3.0.1 - NSUPDATE Remote Format String
https://notcve.org/view.php?id=CVE-2002-0702
23 Jul 2002 — Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response. • https://www.exploit-db.com/exploits/21440 •