Every CVE Search/ Get API key

CVE-2019-6470

dhcpd: use-after-free error leads crash in IPv6 mode when using mismatched BIND libraries

6.5 MediumFix available

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version lists for all repackagings of dhcpd that are vulnerable. In particular, builds from other vendors may also be affected. Operators are advised to consult their vendor documentation.

Attack profile

How easy it is to exploit

Attack vector
Adjacent network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

8.81%Up 7.6 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 6.5

dhcpd: use-after-free error leads crash in IPv6 mode when using mismatched BIND libraries

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version lists for all repackagings of dhcpd that are vulnerable. In particular, builds from other vendors may also be affected. Operators are advised to consult their vendor documentation.

Record
CVE-2019-6470
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
EUVDEUVD-2019-16030 6.5

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version lists for all repackagings of dhcpd that are vulnerable. In particular, builds from other vendors may also be affected. Operators are advised to consult their vendor documentation.

Record
EUVD-2019-16030
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-w4w8-43xj-r4wr 7.5

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd...

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version lists for all repackagings of dhcpd that are vulnerable. In particular, builds from other vendors may also be affected. Operators are advised to consult their vendor documentation.

Record
GHSA-w4w8-43xj-r4wr
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
NVD 6.5

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version lists for all repackagings of dhcpd that are vulnerable. In particular, builds from other vendors may also be affected. Operators are advised to consult their vendor documentation.

Record
CVE-2019-6470
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
OSVALPINE-CVE-2019-6470 7.5

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version lists for all repackagings of dhcpd that are vulnerable. In particular, builds from other vendors may also be affected. Operators are advised to consult their vendor documentation.

Record
ALPINE-CVE-2019-6470
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-34558 7.5

CVE-2019-6470 affecting package bind for versions less than 9.16.44-2

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version lists for all repackagings of dhcpd that are vulnerable. In particular, builds from other vendors may also be affected. Operators are advised to consult their vendor documentation.

Record
AZL-34558
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 14 moreShow less
OSVAZL-6326 7.5

CVE-2019-6470 affecting package bind for versions less than 9.16.15-3

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version lists for all repackagings of dhcpd that are vulnerable. In particular, builds from other vendors may also be affected. Operators are advised to consult their vendor documentation.

Record
AZL-6326
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2019-6470 7.5

CVE-2019-6470 does not affect BellSoft software

Record
BELL-CVE-2019-6470
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 7.5

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version lists for all repackagings of dhcpd that are vulnerable. In particular, builds from other vendors may also be affected. Operators are advised to consult their vendor documentation.

Record
CVE-2019-6470
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2019-6470 7.5

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version lists for all repackagings of dhcpd that are vulnerable. In particular, builds from other vendors may also be affected. Operators are advised to consult their vendor documentation.

Record
DEBIAN-CVE-2019-6470
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2019:2060 5.9

Red Hat Security Advisory: dhcp security and bug fix update

Record
RHSA-2019:2060
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2019:3525 5.9

Red Hat Security Advisory: dhcp security and bug fix update

Record
RHSA-2019:3525
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-6470 7.5

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version lists for all repackagings of dhcpd that are vulnerable. In particular, builds from other vendors may also be affected. Operators are advised to consult their vendor documentation.

Record
UBUNTU-CVE-2019-6470
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2019:2340-1 No score

Security update for dhcp

This update for dhcp fixes the following issues:

Secuirty issue fixed:

  • CVE-2019-6470: Fixed DHCPv6 server crashes (bsc#1134078).

Bug fixes:

  • Add compile option --enable-secs-byteorder to avoid duplicate lease warnings (bsc#1089524).
  • Use IPv6 when called as dhclient6, dhcpd6, and dhcrelay6 (bsc#1136572).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:2340-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2341-1 No score

Security update for dhcp

This update for dhcp fixes the following issues:

Secuirty issue fixed:

  • CVE-2019-6470: Fixed DHCPv6 server crashes (bsc#1134078).

Bug fixes:

  • Add compile option --enable-secs-byteorder to avoid duplicate lease warnings (bsc#1089524).
  • Use IPv6 when called as dhclient6, dhcpd6, and dhcrelay6 (bsc#1136572).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:2341-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10715-1 No score

dhcp-4.4.2.P1-2.4 on GA media

These are all security issues fixed in the dhcp-4.4.2.P1-2.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10715-1
Updated
2026-11-02
OSVSUSE-SU-2019:2657-1 No score

Security update for dhcp

This update for dhcp fixes the following issues:

Secuirty issue fixed:

  • CVE-2019-6470: Fixed DHCPv6 server crashes (bsc#1134078).

Bug fixes:

  • Add compile option --enable-secs-byteorder to avoid duplicate lease warnings (bsc#1089524).
  • Use IPv6 when called as dhclient6, dhcpd6, and dhcrelay6 (bsc#1136572).
Record
SUSE-SU-2019:2657-1
Updated
2026-11-02
OSVSUSE-SU-2019:2727-1 No score

Security update for dhcp

This update for dhcp fixes the following issues:

Secuirty issue fixed:

  • CVE-2019-6470: Fixed DHCPv6 server crashes (bsc#1134078).

Bug fixes:

  • Add compile option --enable-secs-byteorder to avoid duplicate lease warnings (bsc#1089524).
  • Use IPv6 when called as dhclient6, dhcpd6, and dhcrelay6 (bsc#1136572).
Record
SUSE-SU-2019:2727-1
Updated
2026-11-02
OSVSUSE-SU-2019:2727-2 No score

Security update for dhcp

This update for dhcp fixes the following issues:

Secuirty issue fixed:

  • CVE-2019-6470: Fixed DHCPv6 server crashes (bsc#1134078).

Bug fixes:

  • Add compile option --enable-secs-byteorder to avoid duplicate lease warnings (bsc#1089524).
  • Use IPv6 when called as dhclient6, dhcpd6, and dhcrelay6 (bsc#1136572).
Record
SUSE-SU-2019:2727-2
Updated
2026-11-02
OSVUSN-3973-1 No score

isc-dhcp vulnerability

It was discovered that DHCP, when built with a mismatched external BIND library, incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause DHCP to crash, resulting in a denial of service.

Record
USN-3973-1
Updated
2026-11-02

Affected products

Show 8 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
dhcp
Alpine:v3.11
 before 4.4.1-r0
4.4.1-r0
dhcp
Alpine:v3.12
 before 4.4.1-r0
4.4.1-r0
dhcp
Alpine:v3.13
 before 4.4.1-r0
4.4.1-r0
dhcp
Alpine:v3.14
 before 4.4.1-r0
4.4.1-r0
dhcp
Alpine:v3.15
 before 4.4.1-r0
4.4.1-r0
dhcp
Alpine:v3.16
 before 4.4.1-r0
4.4.1-r0
dhcp
Alpine:v3.17
 before 4.4.1-r0
4.4.1-r0
dhcp
Alpine:v3.18
 before 4.4.1-r0
4.4.1-r0
dhcp
Alpine:v3.19
 before 4.4.1-r0
4.4.1-r0
dhcp
Alpine:v3.20
 before 4.4.1-r0
4.4.1-r0
Show 55 moreShow less
Affected packages
PackageAffectedFixed
bind
Azure Linux:3
 before 9.16.44-2
9.16.44-2
bind
Azure Linux:2
 before 9.16.15-3
9.16.15-3
isc-dhcp
Debian:12
 before 4.4.1-2
4.4.1-2
isc-dhcp
Debian:13
 before 4.4.1-2
4.4.1-2
dhclient
Red Hat:enterprise_linux:7::client
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhcp
Red Hat:enterprise_linux:7::client
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhcp-common
Red Hat:enterprise_linux:7::client
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhcp-debuginfo
Red Hat:enterprise_linux:7::client
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhcp-libs
Red Hat:enterprise_linux:7::client
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhcp-devel
Red Hat:enterprise_linux:7::client
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhclient
Red Hat:enterprise_linux:7::computenode
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhcp
Red Hat:enterprise_linux:7::computenode
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhcp-common
Red Hat:enterprise_linux:7::computenode
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhcp-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhcp-libs
Red Hat:enterprise_linux:7::computenode
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhcp-devel
Red Hat:enterprise_linux:7::computenode
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhclient
Red Hat:enterprise_linux:7::server
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhcp
Red Hat:enterprise_linux:7::server
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhcp-common
Red Hat:enterprise_linux:7::server
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhcp-debuginfo
Red Hat:enterprise_linux:7::server
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhcp-libs
Red Hat:enterprise_linux:7::server
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhcp-devel
Red Hat:enterprise_linux:7::server
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhclient
Red Hat:enterprise_linux:7::workstation
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhcp
Red Hat:enterprise_linux:7::workstation
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhcp-common
Red Hat:enterprise_linux:7::workstation
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhcp-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhcp-libs
Red Hat:enterprise_linux:7::workstation
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhcp-devel
Red Hat:enterprise_linux:7::workstation
 before 12:4.2.5-77.el7
12:4.2.5-77.el7
dhcp
Red Hat:enterprise_linux:8::baseos
 before 12:4.3.6-34.el8
12:4.3.6-34.el8
dhcp-client
Red Hat:enterprise_linux:8::baseos
 before 12:4.3.6-34.el8
12:4.3.6-34.el8
dhcp-client-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 12:4.3.6-34.el8
12:4.3.6-34.el8
dhcp-common
Red Hat:enterprise_linux:8::baseos
 before 12:4.3.6-34.el8
12:4.3.6-34.el8
dhcp-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 12:4.3.6-34.el8
12:4.3.6-34.el8
dhcp-debugsource
Red Hat:enterprise_linux:8::baseos
 before 12:4.3.6-34.el8
12:4.3.6-34.el8
dhcp-libs
Red Hat:enterprise_linux:8::baseos
 before 12:4.3.6-34.el8
12:4.3.6-34.el8
dhcp-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 12:4.3.6-34.el8
12:4.3.6-34.el8
dhcp-relay
Red Hat:enterprise_linux:8::baseos
 before 12:4.3.6-34.el8
12:4.3.6-34.el8
dhcp-relay-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 12:4.3.6-34.el8
12:4.3.6-34.el8
dhcp-server
Red Hat:enterprise_linux:8::baseos
 before 12:4.3.6-34.el8
12:4.3.6-34.el8
dhcp-server-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 12:4.3.6-34.el8
12:4.3.6-34.el8
dhcp
SUSE:Linux Enterprise Module for Basesystem 15
 before 4.3.5-6.3.1
4.3.5-6.3.1
dhcp
SUSE:Linux Enterprise Module for Basesystem 15 SP1
 before 4.3.5-6.3.1
4.3.5-6.3.1
dhcp
SUSE:Linux Enterprise Module for Server Applications 15
 before 4.3.5-6.3.1
4.3.5-6.3.1
dhcp
SUSE:Linux Enterprise Module for Server Applications 15 SP1
 before 4.3.5-6.3.1
4.3.5-6.3.1
dhcp
SUSE:Linux Enterprise Desktop 12 SP4
 before 4.3.3-10.19.1
4.3.3-10.19.1
dhcp
SUSE:Linux Enterprise Software Development Kit 12 SP4
 before 4.3.3-10.19.1
4.3.3-10.19.1
dhcp
SUSE:Linux Enterprise Server 12 SP4
 before 4.3.3-10.19.1
4.3.3-10.19.1
dhcp
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 4.3.3-10.19.1
4.3.3-10.19.1
dhcp
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 4.3.3-10.19.1
4.3.3-10.19.1
dhcp
SUSE:Linux Enterprise Server 12 SP5
 before 4.3.3-10.19.1
4.3.3-10.19.1
dhcp
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 4.3.3-10.19.1
4.3.3-10.19.1
isc-dhcp
Ubuntu:18.04:LTS
 before 4.3.5-3ubuntu7.1, plus listed versions
4.3.5-3ubuntu24.3.5-3ubuntu34.3.5-3ubuntu44.3.5-3ubuntu54.3.5-3ubuntu64.3.5-3ubuntu7
4.3.5-3ubuntu7.1
dhcp
openSUSE:Leap 15.0
 before 4.3.5-lp150.5.3.1
4.3.5-lp150.5.3.1
dhcp
openSUSE:Leap 15.1
 before 4.3.5-lp151.6.3.1
4.3.5-lp151.6.3.1
dhcp
openSUSE:Tumbleweed
From an advisory covering 5 CVEs
 before 4.4.2.P1-2.4
4.4.2.P1-2.4

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-6470 is a medium vulnerability (CVSS 6.5) in Isc Dhcpd, published May 3, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.81%, the 95th percentile. Fixed in dhcp 4.4.1-r0.

References

Show 34 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open