Every CVE Search/ Get API key

CVE-2007-5365

Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0...

7.2 HighPublic exploitFix available

CVE-2007-5365 is a high vulnerability (CVSS 7.2) in Openbsd, published October 11, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 80.3%, the 99th percentile. Fixed in dhcp 2.0pl5-19.5etch1.

Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a DHCP request specifying a maximum message size smaller than the minimum IP MTU.

Exploit likelihood

80.3%Up 73.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.2

Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a DHCP request specifying a maximum message size smaller than the minimum IP MTU.

Record
CVE-2007-5365
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a DHCP request specifying a maximum message size smaller than the minimum IP MTU.

Record
CVE-2007-5365
Updated
2026-11-02
EUVDEUVD-2007-5343 No score

Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a DHCP request specifying a maximum message size smaller than the minimum IP MTU.

Record
EUVD-2007-5343
Updated
2026-11-03
GitHub AdvisoriesGHSA-q79j-j4r9-8grp No score

Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0...

Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a DHCP request specifying a maximum message size smaller than the minimum IP MTU.

Record
GHSA-q79j-j4r9-8grp
Weakness
CWE-119
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dhcp
Debian:4.0
 before 2.0pl5-19.5etch1, plus listed versions
2.0pl5-19.5
2.0pl5-19.5etch1
dhcp
Debian:3.1
 before 2.0pl5-19.1sarge3, plus listed versions
2.0pl5-19.12.0pl5-19.1sarge2
2.0pl5-19.1sarge3
dhcp
Debian:4.0
 before 2.0pl5-19.5etch2, plus listed versions
2.0pl5-19.52.0pl5-19.5etch1
2.0pl5-19.5etch2
dhcp
Red Hat:enterprise_linux:2.1::as
 before 1:2.0pl5-11
1:2.0pl5-11
dhcp
Red Hat:enterprise_linux:2.1::aw
 before 1:2.0pl5-11
1:2.0pl5-11
dhcp
Red Hat:enterprise_linux:2.1::es
 before 1:2.0pl5-11
1:2.0pl5-11

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBUbuntu 6.06 - DHCPd Remote Denial of Service2007-11-02

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02affected, aliases, exploits, facts, references, titleExploit-DB, GitHub Advisories, OSV
2026-11-02createdCVE List, NVD

References

Show 33 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open