Skip to content

CVE-2018-1111

DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a...

7.5 HighPublic exploitFix available

DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.

Attack profile

How easy it is to exploit

Attack vector: Adjacent network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

97.9%Up 24.7 points since Apr 14, 2021

What each source reports

CVE List Score used 7.5

DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.

Record: CVE-2018-1111
CVSS 3.0: 7.5 HighCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-77
Updated: 2026-11-02

EUVDEUVD-2018-11756 7.5

DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.

Record: EUVD-2018-11756
CVSS 3.0: 7.5 HighCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-03

GitHub AdvisoriesGHSA-5jw9-5ff9-vr5p 7.5

DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a...

DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.

Record: GHSA-5jw9-5ff9-vr5p
CVSS 3.0: 7.5 HighCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-77, CWE-78
Updated: 2026-11-02

NVD 7.5

DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.

Record: CVE-2018-1111
CVSS 3.0: 7.5 HighCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 7.9 HighAV:A/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-77, CWE-78
Updated: 2026-11-02

OSVRHSA-2018:1453 7.5

Red Hat Security Advisory: dhcp security update

Record: RHSA-2018:1453
CVSS 3.0: 7.5 HighCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2018:1454 7.5

Red Hat Security Advisory: dhcp security update

Record: RHSA-2018:1454
CVSS 3.0: 7.5 HighCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 9 moreShow less

OSVRHSA-2018:1455 7.5

Red Hat Security Advisory: dhcp security update

Record: RHSA-2018:1455
CVSS 3.0: 7.5 HighCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2018:1456 7.5

Red Hat Security Advisory: dhcp security update

Record: RHSA-2018:1456
CVSS 3.0: 7.5 HighCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2018:1457 7.5

Red Hat Security Advisory: dhcp security update

Record: RHSA-2018:1457
CVSS 3.0: 7.5 HighCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2018:1458 7.5

Red Hat Security Advisory: dhcp security update

Record: RHSA-2018:1458
CVSS 3.0: 7.5 HighCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2018:1459 7.5

Red Hat Security Advisory: dhcp security update

Record: RHSA-2018:1459
CVSS 3.0: 7.5 HighCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2018:1460 7.5

Red Hat Security Advisory: dhcp security update

Record: RHSA-2018:1460
CVSS 3.0: 7.5 HighCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2018:1461 7.5

Red Hat Security Advisory: dhcp security update

Record: RHSA-2018:1461
CVSS 3.0: 7.5 HighCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2018:1524 8.3

Red Hat Security Advisory: redhat-virtualization-host bug fix and enhancement update

Record: RHSA-2018:1524
CVSS 3.0: 8.3 HighCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2018:1525 9.8

Red Hat Security Advisory: rhvm-appliance security and enhancement update

Record: RHSA-2018:1525
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`dhclient` Red Hat:enterprise_linux:7::client	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhcp` Red Hat:enterprise_linux:7::client	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhcp-common` Red Hat:enterprise_linux:7::client	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhcp-debuginfo` Red Hat:enterprise_linux:7::client	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhcp-libs` Red Hat:enterprise_linux:7::client	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhcp-devel` Red Hat:enterprise_linux:7::client	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhclient` Red Hat:enterprise_linux:7::computenode	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhcp` Red Hat:enterprise_linux:7::computenode	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhcp-common` Red Hat:enterprise_linux:7::computenode	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhcp-debuginfo` Red Hat:enterprise_linux:7::computenode	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1

Show 115 moreShow less

Affected packages
Package	Affected	Fixed
`dhcp-libs` Red Hat:enterprise_linux:7::computenode	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhcp-devel` Red Hat:enterprise_linux:7::computenode	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhclient` Red Hat:enterprise_linux:7::server	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhcp` Red Hat:enterprise_linux:7::server	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhcp-common` Red Hat:enterprise_linux:7::server	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhcp-debuginfo` Red Hat:enterprise_linux:7::server	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhcp-libs` Red Hat:enterprise_linux:7::server	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhcp-devel` Red Hat:enterprise_linux:7::server	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhclient` Red Hat:enterprise_linux:7::workstation	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhcp` Red Hat:enterprise_linux:7::workstation	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhcp-common` Red Hat:enterprise_linux:7::workstation	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhcp-debuginfo` Red Hat:enterprise_linux:7::workstation	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhcp-libs` Red Hat:enterprise_linux:7::workstation	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhcp-devel` Red Hat:enterprise_linux:7::workstation	before 12:4.2.5-68.el7_5.1	12:4.2.5-68.el7_5.1
`dhclient` Red Hat:enterprise_linux:6::client	before 12:4.1.1-53.P1.el6_9.4	12:4.1.1-53.P1.el6_9.4
`dhcp` Red Hat:enterprise_linux:6::client	before 12:4.1.1-53.P1.el6_9.4	12:4.1.1-53.P1.el6_9.4
`dhcp-common` Red Hat:enterprise_linux:6::client	before 12:4.1.1-53.P1.el6_9.4	12:4.1.1-53.P1.el6_9.4
`dhcp-debuginfo` Red Hat:enterprise_linux:6::client	before 12:4.1.1-53.P1.el6_9.4	12:4.1.1-53.P1.el6_9.4
`dhcp-devel` Red Hat:enterprise_linux:6::client	before 12:4.1.1-53.P1.el6_9.4	12:4.1.1-53.P1.el6_9.4
`dhclient` Red Hat:enterprise_linux:6::computenode	before 12:4.1.1-53.P1.el6_9.4	12:4.1.1-53.P1.el6_9.4
`dhcp` Red Hat:enterprise_linux:6::computenode	before 12:4.1.1-53.P1.el6_9.4	12:4.1.1-53.P1.el6_9.4
`dhcp-common` Red Hat:enterprise_linux:6::computenode	before 12:4.1.1-53.P1.el6_9.4	12:4.1.1-53.P1.el6_9.4
`dhcp-debuginfo` Red Hat:enterprise_linux:6::computenode	before 12:4.1.1-53.P1.el6_9.4	12:4.1.1-53.P1.el6_9.4
`dhcp-devel` Red Hat:enterprise_linux:6::computenode	before 12:4.1.1-53.P1.el6_9.4	12:4.1.1-53.P1.el6_9.4
`dhclient` Red Hat:enterprise_linux:6::server	before 12:4.1.1-53.P1.el6_9.4	12:4.1.1-53.P1.el6_9.4
`dhcp` Red Hat:enterprise_linux:6::server	before 12:4.1.1-53.P1.el6_9.4	12:4.1.1-53.P1.el6_9.4
`dhcp-common` Red Hat:enterprise_linux:6::server	before 12:4.1.1-53.P1.el6_9.4	12:4.1.1-53.P1.el6_9.4
`dhcp-debuginfo` Red Hat:enterprise_linux:6::server	before 12:4.1.1-53.P1.el6_9.4	12:4.1.1-53.P1.el6_9.4
`dhcp-devel` Red Hat:enterprise_linux:6::server	before 12:4.1.1-53.P1.el6_9.4	12:4.1.1-53.P1.el6_9.4
`dhclient` Red Hat:enterprise_linux:6::workstation	before 12:4.1.1-53.P1.el6_9.4	12:4.1.1-53.P1.el6_9.4
`dhcp` Red Hat:enterprise_linux:6::workstation	before 12:4.1.1-53.P1.el6_9.4	12:4.1.1-53.P1.el6_9.4
`dhcp-common` Red Hat:enterprise_linux:6::workstation	before 12:4.1.1-53.P1.el6_9.4	12:4.1.1-53.P1.el6_9.4
`dhcp-debuginfo` Red Hat:enterprise_linux:6::workstation	before 12:4.1.1-53.P1.el6_9.4	12:4.1.1-53.P1.el6_9.4
`dhcp-devel` Red Hat:enterprise_linux:6::workstation	before 12:4.1.1-53.P1.el6_9.4	12:4.1.1-53.P1.el6_9.4
`dhclient` Red Hat:rhel_eus:7.4::computenode	before 12:4.2.5-58.el7_4.4	12:4.2.5-58.el7_4.4
`dhcp` Red Hat:rhel_eus:7.4::computenode	before 12:4.2.5-58.el7_4.4	12:4.2.5-58.el7_4.4
`dhcp-common` Red Hat:rhel_eus:7.4::computenode	before 12:4.2.5-58.el7_4.4	12:4.2.5-58.el7_4.4
`dhcp-debuginfo` Red Hat:rhel_eus:7.4::computenode	before 12:4.2.5-58.el7_4.4	12:4.2.5-58.el7_4.4
`dhcp-libs` Red Hat:rhel_eus:7.4::computenode	before 12:4.2.5-58.el7_4.4	12:4.2.5-58.el7_4.4
`dhcp-devel` Red Hat:rhel_eus:7.4::computenode	before 12:4.2.5-58.el7_4.4	12:4.2.5-58.el7_4.4
`dhclient` Red Hat:rhel_eus:7.4::server	before 12:4.2.5-58.el7_4.4	12:4.2.5-58.el7_4.4
`dhcp` Red Hat:rhel_eus:7.4::server	before 12:4.2.5-58.el7_4.4	12:4.2.5-58.el7_4.4
`dhcp-common` Red Hat:rhel_eus:7.4::server	before 12:4.2.5-58.el7_4.4	12:4.2.5-58.el7_4.4
`dhcp-debuginfo` Red Hat:rhel_eus:7.4::server	before 12:4.2.5-58.el7_4.4	12:4.2.5-58.el7_4.4
`dhcp-libs` Red Hat:rhel_eus:7.4::server	before 12:4.2.5-58.el7_4.4	12:4.2.5-58.el7_4.4
`dhcp-devel` Red Hat:rhel_eus:7.4::server	before 12:4.2.5-58.el7_4.4	12:4.2.5-58.el7_4.4
`dhclient` Red Hat:rhel_eus:7.3::computenode	before 12:4.2.5-47.el7_3.1	12:4.2.5-47.el7_3.1
`dhcp` Red Hat:rhel_eus:7.3::computenode	before 12:4.2.5-47.el7_3.1	12:4.2.5-47.el7_3.1
`dhcp-common` Red Hat:rhel_eus:7.3::computenode	before 12:4.2.5-47.el7_3.1	12:4.2.5-47.el7_3.1
`dhcp-debuginfo` Red Hat:rhel_eus:7.3::computenode	before 12:4.2.5-47.el7_3.1	12:4.2.5-47.el7_3.1
`dhcp-libs` Red Hat:rhel_eus:7.3::computenode	before 12:4.2.5-47.el7_3.1	12:4.2.5-47.el7_3.1
`dhcp-devel` Red Hat:rhel_eus:7.3::computenode	before 12:4.2.5-47.el7_3.1	12:4.2.5-47.el7_3.1
`dhclient` Red Hat:rhel_eus:7.3::server	before 12:4.2.5-47.el7_3.1	12:4.2.5-47.el7_3.1
`dhcp` Red Hat:rhel_eus:7.3::server	before 12:4.2.5-47.el7_3.1	12:4.2.5-47.el7_3.1
`dhcp-common` Red Hat:rhel_eus:7.3::server	before 12:4.2.5-47.el7_3.1	12:4.2.5-47.el7_3.1
`dhcp-debuginfo` Red Hat:rhel_eus:7.3::server	before 12:4.2.5-47.el7_3.1	12:4.2.5-47.el7_3.1
`dhcp-libs` Red Hat:rhel_eus:7.3::server	before 12:4.2.5-47.el7_3.1	12:4.2.5-47.el7_3.1
`dhcp-devel` Red Hat:rhel_eus:7.3::server	before 12:4.2.5-47.el7_3.1	12:4.2.5-47.el7_3.1
`dhclient` Red Hat:rhel_aus:7.2::server	before 12:4.2.5-42.el7_2.1	12:4.2.5-42.el7_2.1
`dhcp` Red Hat:rhel_aus:7.2::server	before 12:4.2.5-42.el7_2.1	12:4.2.5-42.el7_2.1
`dhcp-common` Red Hat:rhel_aus:7.2::server	before 12:4.2.5-42.el7_2.1	12:4.2.5-42.el7_2.1
`dhcp-debuginfo` Red Hat:rhel_aus:7.2::server	before 12:4.2.5-42.el7_2.1	12:4.2.5-42.el7_2.1
`dhcp-libs` Red Hat:rhel_aus:7.2::server	before 12:4.2.5-42.el7_2.1	12:4.2.5-42.el7_2.1
`dhclient` Red Hat:rhel_e4s:7.2::server	before 12:4.2.5-42.el7_2.1	12:4.2.5-42.el7_2.1
`dhcp` Red Hat:rhel_e4s:7.2::server	before 12:4.2.5-42.el7_2.1	12:4.2.5-42.el7_2.1
`dhcp-common` Red Hat:rhel_e4s:7.2::server	before 12:4.2.5-42.el7_2.1	12:4.2.5-42.el7_2.1
`dhcp-debuginfo` Red Hat:rhel_e4s:7.2::server	before 12:4.2.5-42.el7_2.1	12:4.2.5-42.el7_2.1
`dhcp-libs` Red Hat:rhel_e4s:7.2::server	before 12:4.2.5-42.el7_2.1	12:4.2.5-42.el7_2.1
`dhclient` Red Hat:rhel_tus:7.2::server	before 12:4.2.5-42.el7_2.1	12:4.2.5-42.el7_2.1
`dhcp` Red Hat:rhel_tus:7.2::server	before 12:4.2.5-42.el7_2.1	12:4.2.5-42.el7_2.1
`dhcp-common` Red Hat:rhel_tus:7.2::server	before 12:4.2.5-42.el7_2.1	12:4.2.5-42.el7_2.1
`dhcp-debuginfo` Red Hat:rhel_tus:7.2::server	before 12:4.2.5-42.el7_2.1	12:4.2.5-42.el7_2.1
`dhcp-libs` Red Hat:rhel_tus:7.2::server	before 12:4.2.5-42.el7_2.1	12:4.2.5-42.el7_2.1
`dhcp-devel` Red Hat:rhel_aus:7.2::server	before 12:4.2.5-42.el7_2.1	12:4.2.5-42.el7_2.1
`dhcp-devel` Red Hat:rhel_e4s:7.2::server	before 12:4.2.5-42.el7_2.1	12:4.2.5-42.el7_2.1
`dhcp-devel` Red Hat:rhel_tus:7.2::server	before 12:4.2.5-42.el7_2.1	12:4.2.5-42.el7_2.1
`dhclient` Red Hat:rhel_eus:6.7::computenode	before 12:4.1.1-49.P1.el6_7.1	12:4.1.1-49.P1.el6_7.1
`dhcp` Red Hat:rhel_eus:6.7::computenode	before 12:4.1.1-49.P1.el6_7.1	12:4.1.1-49.P1.el6_7.1
`dhcp-common` Red Hat:rhel_eus:6.7::computenode	before 12:4.1.1-49.P1.el6_7.1	12:4.1.1-49.P1.el6_7.1
`dhcp-debuginfo` Red Hat:rhel_eus:6.7::computenode	before 12:4.1.1-49.P1.el6_7.1	12:4.1.1-49.P1.el6_7.1
`dhcp-devel` Red Hat:rhel_eus:6.7::computenode	before 12:4.1.1-49.P1.el6_7.1	12:4.1.1-49.P1.el6_7.1
`dhclient` Red Hat:rhel_eus:6.7::server	before 12:4.1.1-49.P1.el6_7.1	12:4.1.1-49.P1.el6_7.1
`dhcp` Red Hat:rhel_eus:6.7::server	before 12:4.1.1-49.P1.el6_7.1	12:4.1.1-49.P1.el6_7.1
`dhcp-common` Red Hat:rhel_eus:6.7::server	before 12:4.1.1-49.P1.el6_7.1	12:4.1.1-49.P1.el6_7.1
`dhcp-debuginfo` Red Hat:rhel_eus:6.7::server	before 12:4.1.1-49.P1.el6_7.1	12:4.1.1-49.P1.el6_7.1
`dhcp-devel` Red Hat:rhel_eus:6.7::server	before 12:4.1.1-49.P1.el6_7.1	12:4.1.1-49.P1.el6_7.1
`dhclient` Red Hat:rhel_aus:6.6::server	before 12:4.1.1-43.P1.el6_6.2	12:4.1.1-43.P1.el6_6.2
`dhcp` Red Hat:rhel_aus:6.6::server	before 12:4.1.1-43.P1.el6_6.2	12:4.1.1-43.P1.el6_6.2
`dhcp-common` Red Hat:rhel_aus:6.6::server	before 12:4.1.1-43.P1.el6_6.2	12:4.1.1-43.P1.el6_6.2
`dhcp-debuginfo` Red Hat:rhel_aus:6.6::server	before 12:4.1.1-43.P1.el6_6.2	12:4.1.1-43.P1.el6_6.2
`dhclient` Red Hat:rhel_tus:6.6::server	before 12:4.1.1-43.P1.el6_6.2	12:4.1.1-43.P1.el6_6.2
`dhcp` Red Hat:rhel_tus:6.6::server	before 12:4.1.1-43.P1.el6_6.2	12:4.1.1-43.P1.el6_6.2
`dhcp-common` Red Hat:rhel_tus:6.6::server	before 12:4.1.1-43.P1.el6_6.2	12:4.1.1-43.P1.el6_6.2
`dhcp-debuginfo` Red Hat:rhel_tus:6.6::server	before 12:4.1.1-43.P1.el6_6.2	12:4.1.1-43.P1.el6_6.2
`dhcp-devel` Red Hat:rhel_aus:6.6::server	before 12:4.1.1-43.P1.el6_6.2	12:4.1.1-43.P1.el6_6.2
`dhcp-devel` Red Hat:rhel_tus:6.6::server	before 12:4.1.1-43.P1.el6_6.2	12:4.1.1-43.P1.el6_6.2
`dhclient` Red Hat:rhel_aus:6.5::server	before 12:4.1.1-38.P1.el6_5.1	12:4.1.1-38.P1.el6_5.1
`dhcp` Red Hat:rhel_aus:6.5::server	before 12:4.1.1-38.P1.el6_5.1	12:4.1.1-38.P1.el6_5.1
`dhcp-common` Red Hat:rhel_aus:6.5::server	before 12:4.1.1-38.P1.el6_5.1	12:4.1.1-38.P1.el6_5.1
`dhcp-debuginfo` Red Hat:rhel_aus:6.5::server	before 12:4.1.1-38.P1.el6_5.1	12:4.1.1-38.P1.el6_5.1
`dhcp-devel` Red Hat:rhel_aus:6.5::server	before 12:4.1.1-38.P1.el6_5.1	12:4.1.1-38.P1.el6_5.1
`dhclient` Red Hat:rhel_aus:6.4::server	before 12:4.1.1-34.P1.el6_4.2	12:4.1.1-34.P1.el6_4.2
`dhcp` Red Hat:rhel_aus:6.4::server	before 12:4.1.1-34.P1.el6_4.2	12:4.1.1-34.P1.el6_4.2
`dhcp-common` Red Hat:rhel_aus:6.4::server	before 12:4.1.1-34.P1.el6_4.2	12:4.1.1-34.P1.el6_4.2
`dhcp-debuginfo` Red Hat:rhel_aus:6.4::server	before 12:4.1.1-34.P1.el6_4.2	12:4.1.1-34.P1.el6_4.2
`dhcp-devel` Red Hat:rhel_aus:6.4::server	before 12:4.1.1-34.P1.el6_4.2	12:4.1.1-34.P1.el6_4.2
`redhat-virtualization-host` Red Hat:enterprise_linux:7::hypervisor	before 0:4.2-20180508.0.el7_5	0:4.2-20180508.0.el7_5
`redhat-virtualization-host-image-update` Red Hat:enterprise_linux:7::hypervisor	before 0:4.2-20180508.0.el7_5	0:4.2-20180508.0.el7_5
`imgbased` Red Hat:enterprise_linux:7::hypervisor	before 0:1.0.16-0.1.el7ev	0:1.0.16-0.1.el7ev
`ovirt-node-ng` Red Hat:enterprise_linux:7::hypervisor	before 0:4.2.0-0.20170814.0.el7	0:4.2.0-0.20170814.0.el7
`ovirt-node-ng-nodectl` Red Hat:enterprise_linux:7::hypervisor	before 0:4.2.0-0.20170814.0.el7	0:4.2.0-0.20170814.0.el7
`python-imgbased` Red Hat:enterprise_linux:7::hypervisor	before 0:1.0.16-0.1.el7ev	0:1.0.16-0.1.el7ev
`redhat-release-virtualization-host` Red Hat:enterprise_linux:7::hypervisor	before 0:4.2-3.0.el7	0:4.2-3.0.el7
`redhat-virtualization-host-image-update-placeholder` Red Hat:enterprise_linux:7::hypervisor	before 0:4.2-3.0.el7	0:4.2-3.0.el7
`rhvm-appliance` Red Hat:enterprise_linux:7::hypervisor	before 2:4.2-20180504.0.el7	2:4.2-20180504.0.el7

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	DynoRoot DHCP Client - Command Injection	2018-05-18
Exploit-DB	DHCP Client - Command Injection 'DynoRoot' (Metasploit)	2018-06-13
Metasploit	DHCP Client Command Injection (DynoRoot)	2018-05-15
PoC in GitHub	baldassarreFe/FEP3370-advanced-ethical-hacking	2020-11-17
PoC in GitHub	kkirsche/CVE-2018-1111	2018-05-18
PoC in GitHub	knqyf263/CVE-2018-1111	2018-05-17

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases, products	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-1111 is a high vulnerability (CVSS 7.5) in Fedora Dhcp, published May 17, 2018. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 97.9%, the 99th percentile. Fixed in dhclient 12:4.2.5-68.el7_5.1.

References

Show 103 moreShow less