CVE-2022-2928
- Source
- https://cve.org/CVERecord?id=CVE-2022-2928
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-2928.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2022-2928
- Downstream
ALPINE (1)
DEBIAN (1)
MGASA (1)
OESA (1)
openSUSE (1)
RHSA (2)
- Related
- Published
- 2022-10-07T05:15:08Z
- Modified
- 2026-10-24T10:32:28Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
In ISC DHCP 4.4.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called from add_option(), it increases the option's refcount field. However, there is not a corresponding call to option_dereference() to decrement the refcount field. The function add_option() is only used in server responses to lease query packets. Each lease query response calls this function for several options, so eventually, the reference counters could overflow and cause the server to abort.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "10.0" }, { "last_affected": "10.0" } ], "source": "CPE_STRING" } ], "vendor_product": "debian:debian_linux" }, { "cpes": [ "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*", "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*", "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "35" }, { "last_affected": "35" }, { "introduced": "36" }, { "last_affected": "36" }, { "introduced": "37" }, { "last_affected": "37" } ], "source": "CPE_STRING" } ], "vendor_product": "fedoraproject:fedora" } ] }- References
-
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2SARIK7KZ7MGQIWDRWZFAOSQSPXY4GOU/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QQXYCIWUDILRCNBAIMVFCSGXBRKEPB4K/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T6IBFH4MRRNJQVWEKILQ6I6CXWW766FX/
- https://kb.isc.org/docs/cve-2022-2928
- https://lists.debian.org/debian-lts-announce/2022/10/msg00015.html
- https://security.gentoo.org/glsa/202305-22
Affected packages
Git / gitlab.isc.org/isc-projects/dhcp
Affected ranges
- Type
- GIT
- Repo
- https://gitlab.isc.org/isc-projects/dhcp
- Events
-
IntroducedLast AffectedIntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:isc:dhcp:*:*:*:*:*:*:*:*", "range": [ { "introduced": "4.4.0" }, { "last_affected": "4.4.3" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r1" }, { "last_affected": "4.1-esv-r1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r10:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r10" }, { "last_affected": "4.1-esv-r10" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r10_b1:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r10_b1" }, { "last_affected": "4.1-esv-r10_b1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r10b1:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r10b1" }, { "last_affected": "4.1-esv-r10b1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r10_rc1:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r10_rc1" }, { "last_affected": "4.1-esv-r10_rc1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r10rc1:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r10rc1" }, { "last_affected": "4.1-esv-r10rc1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r11:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r11" }, { "last_affected": "4.1-esv-r11" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r11_b1:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r11_b1" }, { "last_affected": "4.1-esv-r11_b1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r11b1:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r11b1" }, { "last_affected": "4.1-esv-r11b1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc1:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r11_rc1" }, { "last_affected": "4.1-esv-r11_rc1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r11rc1:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r11rc1" }, { "last_affected": "4.1-esv-r11rc1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc2:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r11_rc2" }, { "last_affected": "4.1-esv-r11_rc2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r11rc2:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r11rc2" }, { "last_affected": "4.1-esv-r11rc2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r12:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r12" }, { "last_affected": "4.1-esv-r12" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r12-p1:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r12\\-p1" }, { "last_affected": "4.1-esv-r12\\-p1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r12_b1:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r12_b1" }, { "last_affected": "4.1-esv-r12_b1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r12_p1:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r12_p1" }, { "last_affected": "4.1-esv-r12_p1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r12b1:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r12b1" }, { "last_affected": "4.1-esv-r12b1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r13:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r13" }, { "last_affected": "4.1-esv-r13" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r13_b1:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r13_b1" }, { "last_affected": "4.1-esv-r13_b1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r13b1:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r13b1" }, { "last_affected": "4.1-esv-r13b1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r14:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r14" }, { "last_affected": "4.1-esv-r14" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r14_b1:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r14_b1" }, { "last_affected": "4.1-esv-r14_b1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r14b1:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r14b1" }, { "last_affected": "4.1-esv-r14b1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r15:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r15" }, { "last_affected": "4.1-esv-r15" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r15-p1:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r15\\-p1" }, { "last_affected": "4.1-esv-r15\\-p1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r15_b1:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r15_b1" }, { "last_affected": "4.1-esv-r15_b1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r16:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r16" }, { "last_affected": "4.1-esv-r16" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:isc:dhcp:4.1-esv:r16-p1:*:*:*:*:*:*", "range": [ { "introduced": "4.1-esv-r16\\-p1" }, { "last_affected": "4.1-esv-r16\\-p1" } ], "source": "CPE_STRING" } ] }
Affected versions
4.*
4.1-esv-r1
4.1-esv-r10
4.1-esv-r10_b1
4.1-esv-r10_rc1
4.1-esv-r11
4.1-esv-r11_b1
4.1-esv-r11_rc1
4.1-esv-r11_rc2
4.1-esv-r12
4.1-esv-r12\-p1
4.1-esv-r13
4.1-esv-r13_b1
4.1-esv-r14
4.1-esv-r14_b1
4.1-esv-r15
4.1-esv-r15\-p1
4.1-esv-r16
4.1-esv-r16\-p1
Other
list
v4_1_esv_R4_Oracle
v4_1_esv_r1
v4_1_esv_r10
v4_1_esv_r10b1
v4_1_esv_r10rc1
v4_1_esv_r11
v4_1_esv_r11b1
v4_1_esv_r11rc1
v4_1_esv_r11rc2
v4_1_esv_r12
v4_1_esv_r12b1
v4_1_esv_r13
v4_1_esv_r13b1
v4_1_esv_r14
v4_1_esv_r14b1
v4_1_esv_r15
v4_1_esv_r15b1
v4_1_esv_r16b1
v4_1_esv_r2
v4_1_esv_r3
v4_1_esv_r4
v4_1_esv_r5
v4_1_esv_r5b1
v4_1_esv_r5rc1
v4_1_esv_r5rc2
v4_1_esv_r6
v4_1_esv_r7
v4_1_esv_r8
v4_1_esv_r8b1
v4_1_esv_r8rc1
v4_1_esv_r9
v4_1_esv_r9b1
v4_1_esv_r9rc1
v4_4_0
v4_4_0_f1
v4_4_1
v4_4_1_f1
v4_4_2
v4_4_2_f1
v4_4_2b1
v4_4_2b1_f1
v4_4_2b1_f2
v4_4_3