{"id":"CVE-2022-2928","aliases":["ALPINE-CVE-2022-2928","ALSA-2023:2502","ALSA-2023:3000","CLSA-2022-1669241675","CLSA-2023-1685629665","CLSA-2023-1685631644","DEBIAN-CVE-2022-2928","DLA-3146-1","DSA-5251-1","EUVD-2022-35151","GHSA-5fp7-mmwq-gvmw","MGASA-2022-0374","OESA-2022-2009","RHSA-2023:2502","RHSA-2023:3000","SUSE-SU-2022:3991-1","SUSE-SU-2022:3992-1","UBUNTU-CVE-2022-2928","USN-5658-1","USN-5658-2","USN-5658-3","openSUSE-SU-2024:12390-1"],"status":"published","title":"An option refcount overflow exists in dhcpd","description":"In ISC DHCP 4.4.0 -\u003e 4.4.3, ISC DHCP 4.1-ESV-R1 -\u003e 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called from add_option(), it increases the option's refcount field. However, there is not a corresponding call to option_dereference() to decrement the refcount field. The function add_option() is only used in server responses to lease query packets. Each lease query response calls this function for several options, so eventually, the reference counters could overflow and cause the server to abort.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00711,"percentile":0.53901,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2022-10-05T00:00:00Z","modified":"2026-11-03T07:18:33Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"dhcp","fixed_in":["4.4.3_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"dhcp","fixed_in":["4.4.3_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"dhcp","fixed_in":["4.4.3_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"dhcp","fixed_in":["4.4.3_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"dhcp","fixed_in":["4.4.3_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"dhcp","fixed_in":["4.4.3_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"dhcp","fixed_in":["4.4.3_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"dhcp","fixed_in":["4.4.3_p1-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"isc-dhcp","fixed_in":["4.4.3-2.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"isc-dhcp","fixed_in":["4.4.3-2.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"isc-dhcp","fixed_in":["4.2.4-7ubuntu12.13+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"isc-dhcp","fixed_in":["4.3.3-5ubuntu12.10+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"isc-dhcp","fixed_in":["4.3.5-3ubuntu7.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"isc-dhcp","fixed_in":["4.4.1-2.1ubuntu5.20.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"isc-dhcp","fixed_in":["4.4.1-2.3ubuntu2.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0"},{"fixed":"4.4.3_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0"},{"fixed":"4.4.3_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0"},{"fixed":"4.4.3_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0"},{"fixed":"4.4.3_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0"},{"fixed":"4.4.3_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0"},{"fixed":"4.4.3_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0"},{"fixed":"4.4.3_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0"},{"fixed":"4.4.3_p1-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dhcp-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.4.2-18.b1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dhcp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.4.2-18.b1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dhcp-relay","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.4.2-18.b1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dhcp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.4.2-18.b1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dhcp-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-49.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dhcp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-49.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dhcp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-49.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dhcp-relay","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-49.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dhcp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-49.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"isc-dhcp-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-5ubuntu12.11+tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"isc-dhcp-client-ddns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-5ubuntu12.11+tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"isc-dhcp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-5ubuntu12.11+tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"isc-dhcp-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-5ubuntu12.11+tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"isc-dhcp-relay","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-5ubuntu12.11+tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"isc-dhcp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-5ubuntu12.11+tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"isc-dhcp-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-5ubuntu12.11+tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"dhcp-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-45.el8.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"dhcp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-45.el8.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"dhcp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-45.el8.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"dhcp-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-45.el8.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"dhcp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-45.el8.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"dhcp-relay","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-45.el8.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"dhcp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-45.el8.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"dhcp-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-45.el8.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"dhcp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-45.el8.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"dhcp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-45.el8.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"dhcp-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-45.el8.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"dhcp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-45.el8.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"dhcp-relay","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-45.el8.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"dhcp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-45.el8.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.3-2.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.3-2.1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.1-2+deb10u2"}]}],"versions":["4.4.1-2","4.4.1-2+deb10u1"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.1-2.3+deb11u1"}]}],"versions":["4.4.1-2.3"],"bundled":2},{"source":"osv","ecosystem":"Mageia:8","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-10.2.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-9.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-9.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-15.oe2203"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.4.2-18.b1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dhcp-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.4.2-18.b1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dhcp-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.4.2-18.b1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dhcp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.4.2-18.b1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dhcp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.4.2-18.b1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dhcp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.4.2-18.b1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dhcp-relay","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.4.2-18.b1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dhcp-relay-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.4.2-18.b1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dhcp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.4.2-18.b1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dhcp-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.4.2-18.b1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-49.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dhcp-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-49.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dhcp-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-49.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dhcp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-49.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dhcp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-49.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dhcp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-49.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dhcp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-49.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dhcp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-49.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dhcp-relay","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-49.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dhcp-relay-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-49.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dhcp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-49.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dhcp-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-49.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.6.P1-150000.6.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.6.P1-150000.6.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.6.P1-150000.6.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.6.P1-150000.6.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.6.P1-150000.6.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.6.P1-150000.6.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-10.28.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-10.28.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-10.28.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4-7ubuntu12.13+esm2"}]}],"versions":["4.2.4-7ubuntu8","4.2.4-7ubuntu9","4.2.4-7ubuntu10","4.2.4-7ubuntu11","4.2.4-7ubuntu12","4.2.4-7ubuntu12.1","4.2.4-7ubuntu12.2","4.2.4-7ubuntu12.3","4.2.4-7ubuntu12.4","4.2.4-7ubuntu12.5","4.2.4-7ubuntu12.6","4.2.4-7ubuntu12.7","4.2.4-7ubuntu12.8","4.2.4-7ubuntu12.9","4.2.4-7ubuntu12.10","4.2.4-7ubuntu12.12","4.2.4-7ubuntu12.13","4.2.4-7ubuntu12.13+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-5ubuntu12.10+esm2"}]}],"versions":["4.3.1-5ubuntu3","4.3.1-5ubuntu4","4.3.1-5ubuntu5","4.3.3-5ubuntu1","4.3.3-5ubuntu2","4.3.3-5ubuntu4","4.3.3-5ubuntu5","4.3.3-5ubuntu7","4.3.3-5ubuntu8","4.3.3-5ubuntu9","4.3.3-5ubuntu10","4.3.3-5ubuntu11","4.3.3-5ubuntu12","4.3.3-5ubuntu12.1","4.3.3-5ubuntu12.3","4.3.3-5ubuntu12.4","4.3.3-5ubuntu12.6","4.3.3-5ubuntu12.7","4.3.3-5ubuntu12.9","4.3.3-5ubuntu12.10","4.3.3-5ubuntu12.10+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-3ubuntu7.4"}]}],"versions":["4.3.5-3ubuntu2","4.3.5-3ubuntu3","4.3.5-3ubuntu4","4.3.5-3ubuntu5","4.3.5-3ubuntu6","4.3.5-3ubuntu7","4.3.5-3ubuntu7.1","4.3.5-3ubuntu7.2","4.3.5-3ubuntu7.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.1-2.1ubuntu5.20.04.4"}]}],"versions":["4.4.1-2ubuntu5","4.4.1-2ubuntu6","4.4.1-2.1ubuntu1","4.4.1-2.1ubuntu2","4.4.1-2.1ubuntu3","4.4.1-2.1ubuntu4","4.4.1-2.1ubuntu5","4.4.1-2.1ubuntu5.20.04.1","4.4.1-2.1ubuntu5.20.04.2","4.4.1-2.1ubuntu5.20.04.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.1-2.3ubuntu2.3"}]}],"versions":["4.4.1-2.3ubuntu1","4.4.1-2.3ubuntu2","4.4.1-2.3ubuntu2.1","4.4.1-2.3ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-3ubuntu7.4"}]}],"versions":["4.3.5-3ubuntu2","4.3.5-3ubuntu3","4.3.5-3ubuntu4","4.3.5-3ubuntu5","4.3.5-3ubuntu6","4.3.5-3ubuntu7","4.3.5-3ubuntu7.1","4.3.5-3ubuntu7.2","4.3.5-3ubuntu7.3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.1-2.1ubuntu5.20.04.4"}]}],"versions":["4.4.1-2ubuntu5","4.4.1-2ubuntu6","4.4.1-2.1ubuntu1","4.4.1-2.1ubuntu2","4.4.1-2.1ubuntu3","4.4.1-2.1ubuntu4","4.4.1-2.1ubuntu5","4.4.1-2.1ubuntu5.20.04.1","4.4.1-2.1ubuntu5.20.04.2","4.4.1-2.1ubuntu5.20.04.3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.1-2.3ubuntu2.3"}]}],"versions":["4.4.1-2.3ubuntu1","4.4.1-2.3ubuntu2","4.4.1-2.3ubuntu2.1","4.4.1-2.3ubuntu2.2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-5ubuntu12.10+esm2"}]}],"versions":["4.3.1-5ubuntu3","4.3.1-5ubuntu4","4.3.1-5ubuntu5","4.3.3-5ubuntu1","4.3.3-5ubuntu2","4.3.3-5ubuntu4","4.3.3-5ubuntu5","4.3.3-5ubuntu7","4.3.3-5ubuntu8","4.3.3-5ubuntu9","4.3.3-5ubuntu10","4.3.3-5ubuntu11","4.3.3-5ubuntu12","4.3.3-5ubuntu12.1","4.3.3-5ubuntu12.3","4.3.3-5ubuntu12.4","4.3.3-5ubuntu12.6","4.3.3-5ubuntu12.7","4.3.3-5ubuntu12.9","4.3.3-5ubuntu12.10","4.3.3-5ubuntu12.10+esm1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4-7ubuntu12.13+esm2"}]}],"versions":["4.2.4-7ubuntu8","4.2.4-7ubuntu9","4.2.4-7ubuntu10","4.2.4-7ubuntu11","4.2.4-7ubuntu12","4.2.4-7ubuntu12.1","4.2.4-7ubuntu12.2","4.2.4-7ubuntu12.3","4.2.4-7ubuntu12.4","4.2.4-7ubuntu12.5","4.2.4-7ubuntu12.6","4.2.4-7ubuntu12.7","4.2.4-7ubuntu12.8","4.2.4-7ubuntu12.9","4.2.4-7ubuntu12.10","4.2.4-7ubuntu12.12","4.2.4-7ubuntu12.13","4.2.4-7ubuntu12.13+esm1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2.P1-11.1"}]}],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"isc","product":"dhcp"},{"vendor":"isc","product":"isc dhcp"}],"references":[{"url":"https://kb.isc.org/docs/cve-2022-2928","tags":["x_transferred","Vendor Advisory","advisory","web","article","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/10/msg00015.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QQXYCIWUDILRCNBAIMVFCSGXBRKEPB4K/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T6IBFH4MRRNJQVWEKILQ6I6CXWW766FX/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2SARIK7KZ7MGQIWDRWZFAOSQSPXY4GOU/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/202305-22","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2928","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QQXYCIWUDILRCNBAIMVFCSGXBRKEPB4K/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T6IBFH4MRRNJQVWEKILQ6I6CXWW766FX/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2SARIK7KZ7MGQIWDRWZFAOSQSPXY4GOU/"},{"url":"https://github.com/advisories/GHSA-5fp7-mmwq-gvmw"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-2928","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2502","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2928","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2929","tags":["report"]},{"url":"https://bugzilla.redhat.com/2132001","tags":["report"]},{"url":"https://bugzilla.redhat.com/2132002","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-2502.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:3000","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-3000.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2022-1669241675","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2023-1685629665.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2023-1685631644.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-2928","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0374.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30942","tags":["report"]},{"url":"https://kb.isc.org/docs/cve-2022-2929","tags":["web","article"]},{"url":"https://www.openwall.com/lists/oss-security/2022/10/05/1","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-5658-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2009","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2929","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2095396","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2132001","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2132002","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2502.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2928","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2929","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3000.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223991-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1203988","tags":["report"]},{"url":"https://bugzilla.suse.com/1203989","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2929","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223992-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-2928","tags":["report"]},{"url":"https://lists.isc.org/pipermail/dhcp-announce/2022-October/000437.html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5658-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5658-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-2929","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-2928","title":"An option refcount overflow exists in dhcpd","description":"In ISC DHCP 4.4.0 -\u003e 4.4.3, ISC DHCP 4.1-ESV-R1 -\u003e 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called from add_option(), it increases the option's refcount field. However, there is not a corresponding call to option_dereference() to decrement the refcount field. The function add_option() is only used in server responses to lease query packets. Each lease query response calls this function for several options, so eventually, the reference counters could overflow and cause the server to abort.","status":"published","published":"2022-10-07T04:45:11.751Z","modified":"2024-09-17T00:21:40.167Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:34:32.495407Z"}],"euvd":[{"id":"EUVD-2022-35151","description":"In ISC DHCP 4.4.0 -\u003e 4.4.3, ISC DHCP 4.1-ESV-R1 -\u003e 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called from add_option(), it increases the option's refcount field. However, there is not a corresponding call to option_dereference() to decrement the refcount field. The function add_option() is only used in server responses to lease query packets. Each lease query response calls this function for several options, so eventually, the reference counters could overflow and cause the server to abort.","status":"published","published":"2022-10-07T04:45:11Z","modified":"2024-09-17T00:21:40Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:28:59.742061Z"}],"ghsa":[{"id":"GHSA-5fp7-mmwq-gvmw","title":"In ISC DHCP 4.4.0 -\u003e 4.4.3, ISC DHCP 4.1-ESV-R1 -\u003e 4.1-ESV-R16-P1, when the function...","description":"In ISC DHCP 4.4.0 -\u003e 4.4.3, ISC DHCP 4.1-ESV-R1 -\u003e 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called from add_option(), it increases the option's refcount field. However, there is not a corresponding call to option_dereference() to decrement the refcount field. The function add_option() is only used in server responses to lease query packets. Each lease query response calls this function for several options, so eventually, the reference counters could overflow and cause the server to abort.","status":"published","published":"2022-10-07T18:16:01Z","modified":"2023-05-12T05:00:31Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:54:35.559556Z"}],"nvd":[{"id":"CVE-2022-2928","description":"In ISC DHCP 4.4.0 -\u003e 4.4.3, ISC DHCP 4.1-ESV-R1 -\u003e 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called from add_option(), it increases the option's refcount field. However, there is not a corresponding call to option_dereference() to decrement the refcount field. The function add_option() is only used in server responses to lease query packets. Each lease query response calls this function for several options, so eventually, the reference counters could overflow and cause the server to abort.","status":"published","published":"2022-10-07T05:15:08.677Z","modified":"2026-06-17T04:42:50.17Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:07:29.026521Z"}],"osv":[{"id":"ALPINE-CVE-2022-2928","description":"In ISC DHCP 4.4.0 -\u003e 4.4.3, ISC DHCP 4.1-ESV-R1 -\u003e 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called from add_option(), it increases the option's refcount field. However, there is not a corresponding call to option_dereference() to decrement the refcount field. The function add_option() is only used in server responses to lease query packets. Each lease query response calls this function for several options, so eventually, the reference counters could overflow and cause the server to abort.","status":"published","published":"2022-10-07T05:15:08.677Z","modified":"2026-11-03T07:18:33.154495473Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"CVE-2022-2928","description":"In ISC DHCP 4.4.0 -\u003e 4.4.3, ISC DHCP 4.1-ESV-R1 -\u003e 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called from add_option(), it increases the option's refcount field. However, there is not a corresponding call to option_dereference() to decrement the refcount field. The function add_option() is only used in server responses to lease query packets. Each lease query response calls this function for several options, so eventually, the reference counters could overflow and cause the server to abort.","status":"published","published":"2022-10-07T05:15:08.677Z","modified":"2026-10-24T10:30:37.341287725Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:25.164673Z"},{"id":"OESA-2022-2009","title":"dhcp security update","description":"The Dynamic Host Configuration Protocol (DHCP) is a network management protocol used on UDP/IP networks whereby a DHCP server dynamically assigns an IP address and other network configuration parameters to each device on a network so they can communicate with other IP networks.\r\n\r\nSecurity Fix(es):\r\n\r\nIn ISC DHCP 4.4.0 -\u0026gt; 4.4.3, ISC DHCP 4.1-ESV-R1 -\u0026gt; 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called from add_option(), it increases the option\u0026apos;s refcount field. However, there is not a corresponding call to option_dereference() to decrement the refcount field. The function add_option() is only used in server responses to lease query packets. Each lease query response calls this function for several options, so eventually, the reference counters could overflow and cause the server to abort.(CVE-2022-2928)\r\n\r\nIn ISC DHCP 1.0 -\u0026gt; 4.4.3, ISC DHCP 4.1-ESV-R1 -\u0026gt; 4.1-ESV-R16-P1 a system with access to a DHCP server, sending DHCP packets crafted to include fqdn labels longer than 63 bytes, could eventually cause the server to run out of memory.(CVE-2022-2929)","status":"published","published":"2022-10-21T11:05:19Z","modified":"2026-08-18T01:17:20.407374514Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2023:2502","title":"Red Hat Security Advisory: dhcp security and enhancement update","status":"published","published":"2024-09-16T09:36:30Z","modified":"2026-07-03T10:02:58Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:3000","title":"Red Hat Security Advisory: dhcp security and bug fix update","status":"published","published":"2024-09-16T09:36:38Z","modified":"2026-07-03T10:03:00Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"UBUNTU-CVE-2022-2928","description":"In ISC DHCP 4.4.0 -\u003e 4.4.3, ISC DHCP 4.1-ESV-R1 -\u003e 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called from add_option(), it increases the option's refcount field. However, there is not a corresponding call to option_dereference() to decrement the refcount field. The function add_option() is only used in server responses to lease query packets. Each lease query response calls this function for several options, so eventually, the reference counters could overflow and cause the server to abort.","status":"published","published":"2022-10-05T00:00:00Z","modified":"2026-04-22T13:21:36.19294Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:53.899276Z"},{"id":"ALSA-2023:2502","title":"Moderate: dhcp security and enhancement update","description":"The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network.\n\nSecurity Fix(es):\n\n* dhcp: option refcount overflow when leasequery is enabled leading to dhcpd abort (CVE-2022-2928)\n* dhcp: DHCP memory leak (CVE-2022-2929)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-09T00:00:00Z","modified":"2026-10-29T11:30:55.951434678Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:3000","title":"Moderate: dhcp security and bug fix update","description":"The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network.\n\nSecurity Fix(es):\n\n* dhcp: option refcount overflow when leasequery is enabled leading to dhcpd abort (CVE-2022-2928)\n* dhcp: DHCP memory leak (CVE-2022-2929)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-16T00:00:00Z","modified":"2026-10-29T11:02:06.272981699Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CLSA-2022-1669241675","title":"Fix CVE(s): CVE-2022-2928, CVE-2022-2929","description":"\n   * SECURITY UPDATE: option refcount overflow\n     - debian/patches/CVE-2022-2928.patch: fix work with reference counter\n       'refcount'\n     - CVE-2022-2928\n   * SECURITY UPDATE: DHCP memory leak\n     - debian/patches/CVE-2022-2929.patch: free memory when incorrect 'fqdn'\n       labels are used\n     - CVE-2022-2929","status":"published","published":"2022-11-23T22:14:35Z","modified":"2026-06-04T10:03:51.800139Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2023-1685629665","title":"dhcp: Fix of 2 CVEs","description":"- CVE-2022-2928: option refcount overflow when leasequery is enabled leading to dhcpd abort\n- CVE-2022-2929: DHCP memory leak\n- Backported tests from upstream, for this and other CVE`s","status":"published","published":"2023-06-01T14:27:50Z","modified":"2026-06-01T00:33:19.344507173Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1685631644","title":"dhcp: Fix of 2 CVEs","description":"- CVE-2022-2928: option refcount overflow when leasequery is enabled leading to dhcpd abort\n- CVE-2022-2929: DHCP memory leak\n- Backported tests from upstream, for this and other CVE`s","status":"published","published":"2023-06-01T15:00:49Z","modified":"2026-06-01T00:33:13.317527539Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"DEBIAN-CVE-2022-2928","description":"In ISC DHCP 4.4.0 -\u003e 4.4.3, ISC DHCP 4.1-ESV-R1 -\u003e 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called from add_option(), it increases the option's refcount field. However, there is not a corresponding call to option_dereference() to decrement the refcount field. The function add_option() is only used in server responses to lease query packets. Each lease query response calls this function for several options, so eventually, the reference counters could overflow and cause the server to abort.","status":"published","published":"2022-10-07T05:15:08.677Z","modified":"2026-11-03T06:02:18.420759218Z","updated_at":"2026-11-03T06:44:05.456691Z"},{"id":"DLA-3146-1","title":"isc-dhcp - security update","status":"published","published":"2022-10-11T00:00:00Z","modified":"2026-03-09T01:22:54.667864Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5251-1","title":"isc-dhcp - security update","status":"published","published":"2022-10-06T00:00:00Z","modified":"2026-03-09T02:09:15.548786Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0374","title":"Updated dhcp packages fix security vulnerability","description":"In ISC DHCP 4.4.0 -\u003e 4.4.3, ISC DHCP 4.1-ESV-R1 -\u003e 4.1-ESV-R16-P1, when\nthe function option_code_hash_lookup() is called from add_option(), it\nincreases the option's refcount field. However, there is not a\ncorresponding call to option_dereference() to decrement the refcount\nfield. The function add_option() is only used in server responses to\nlease query packets. Each lease query response calls this function for\nseveral options, so eventually, the reference counters could overflow and\ncause the server to abort. (CVE-2022-2928)\n\nIn ISC DHCP 1.0 -\u003e 4.4.3, ISC DHCP 4.1-ESV-R1 -\u003e 4.1-ESV-R16-P1 a system\nwith access to a DHCP server, sending DHCP packets crafted to include fqdn\nlabels longer than 63 bytes, could eventually cause the server to run out\nof memory. (CVE-2022-2929)\n","status":"published","published":"2022-10-18T23:14:56Z","modified":"2026-04-16T04:44:39.887671393Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12390-1","title":"dhcp-4.4.2.P1-11.1 on GA media","description":"These are all security issues fixed in the dhcp-4.4.2.P1-11.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:39:01.362744Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2022:3991-1","title":"Security update for dhcp","description":"This update for dhcp fixes the following issues:\n\n  - CVE-2022-2928: Fixed an option refcount overflow (bsc#1203988).\n  - CVE-2022-2929: Fixed a DHCP memory leak (bsc#1203989).\n","status":"published","published":"2022-11-15T12:54:38Z","modified":"2026-02-04T03:18:26.08497Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3992-1","title":"Security update for dhcp","description":"This update for dhcp fixes the following issues:\n\n  - CVE-2022-2928: Fixed an option refcount overflow (bsc#1203988).\n  - CVE-2022-2929: Fixed a DHCP memory leak (bsc#1203989).\n","status":"published","published":"2022-11-15T12:54:55Z","modified":"2026-02-04T03:12:55.515826Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"USN-5658-1","title":"isc-dhcp vulnerabilities","description":"It was discovered that DHCP incorrectly handled option reference counting.\nA remote attacker could possibly use this issue to cause DHCP servers to\ncrash, resulting in a denial of service. (CVE-2022-2928)\n\nIt was discovered that DHCP incorrectly handled certain memory operations.\nA remote attacker could possibly use this issue to cause DHCP clients and\nservers to consume resources, leading to a denial of service.\n(CVE-2022-2929)\n","status":"published","published":"2022-10-05T16:45:48Z","modified":"2026-04-22T10:28:27.281517Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5658-2","title":"isc-dhcp vulnerabilities","description":"USN-5658-1 fixed vulnerabilities in DHCP. This update provides\nthe corresponding updates for Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that DHCP incorrectly handled option reference counting.\n A remote attacker could possibly use this issue to cause DHCP servers to\n crash, resulting in a denial of service. (CVE-2022-2928)\n\n It was discovered that DHCP incorrectly handled certain memory operations.\n A remote attacker could possibly use this issue to cause DHCP clients and\n servers to consume resources, leading to a denial of service.\n (CVE-2022-2929)\n","status":"published","published":"2022-11-07T19:24:32Z","modified":"2026-06-25T13:30:15.361589499Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5658-3","title":"isc-dhcp vulnerabilities","description":"USN-5658-1 fixed several vulnerabilities in DHCP. This update provides\nthe corresponding update for Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that DHCP incorrectly handled option reference counting.\n A remote attacker could possibly use this issue to cause DHCP servers to\n crash, resulting in a denial of service. (CVE-2022-2928)\n\n It was discovered that DHCP incorrectly handled certain memory operations.\n A remote attacker could possibly use this issue to cause DHCP clients and\n servers to consume resources, leading to a denial of service.\n (CVE-2022-2929)\n","status":"published","published":"2022-11-21T16:00:28Z","modified":"2026-06-29T13:49:41.870977502Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}