Medium severity5.9NVD Advisory· Published Mar 9, 2016· Updated Jun 17, 2026

CVE-2016-2774

Description

ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to cause a denial of service (INSIST assertion failure or request-processing outage) by establishing many sessions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

114

Isc/DHCP92 versions
cpe:2.3:a:isc:dhcp:4.1.0:-:*:*:*:*:*:*+ 91 more
- cpe:2.3:a:isc:dhcp:4.1.0:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1.0:a1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1.0:a2:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1.0:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1.1:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1.1:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1.1:b2:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1.1:b3:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1.1:p1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1.1:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1.2:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1.2:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1.2:p1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1.2:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r10:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r10_b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r11_b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r11_rc2:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r12:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r12_b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r2:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r3:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r3_b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r4:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r5:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r5_b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r5_rc2:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r6:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r7:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r8:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r8_b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r8_rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r9:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r9_b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:r9_rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.1-esv:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.0:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.0:a1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.0:a2:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.0:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.0:b2:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.0:p1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.0:p2:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.1:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.1:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.1:p1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.1:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.2:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.2:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.2:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.3:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.3:p1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.3:p2:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.4:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.4:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.4:p1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.4:p2:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.4:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.4:rc2:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.5:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.5:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.5:p1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.5:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.6:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.6:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.6:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.7:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.7:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.7:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.8:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.8:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.8:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.2.8:rc2:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.0:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.0:a1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.0:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.1:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.1:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.1:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.2:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.2:b1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.2:rc1:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.2:rc2:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.3:-:*:*:*:*:*:*
- cpe:2.3:a:isc:dhcp:4.3.3:b1:*:*:*:*:*:*
- (no CPE)range: <4.3.4
Canonical/Ubuntu Linux3 versions
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
Debian/linux
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
osv-coords18 versions
pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012 pkg:rpm/suse/dhcp&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1 pkg:rpm/suse/dhcp&distro=SUSE%20Manager%202.1 pkg:rpm/suse/dhcp&distro=SUSE%20Manager%20Proxy%202.1 pkg:rpm/suse/dhcp&distro=SUSE%20OpenStack%20Cloud%205
< 4.2.6-14.6.1+ 17 more
- (no CPE)range: < 4.2.6-14.6.1
- (no CPE)range: < 4.3.3-9.1
- (no CPE)range: < 4.2.4.P2-0.27.1
- (no CPE)range: < 4.2.4.P2-0.11.15.1
- (no CPE)range: < 4.2.4.P2-0.27.1
- (no CPE)range: < 4.2.4.P2-0.27.1
- (no CPE)range: < 4.2.4.P2-0.27.1
- (no CPE)range: < 4.2.6-14.6.1
- (no CPE)range: < 4.3.3-9.1
- (no CPE)range: < 4.2.4.P2-0.27.1
- (no CPE)range: < 4.2.6-14.6.1
- (no CPE)range: < 4.3.3-9.1
- (no CPE)range: < 4.2.4.P2-0.27.1
- (no CPE)range: < 4.2.6-14.6.1
- (no CPE)range: < 4.3.3-9.1
- (no CPE)range: < 4.2.4.P2-0.27.1
- (no CPE)range: < 4.2.4.P2-0.27.1
- (no CPE)range: < 4.2.4.P2-0.27.1

Patches

Vulnerability mechanics

References

lists.fedoraproject.org/pipermail/package-announce/2016-May/183458.htmlnvdThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2016-May/183640.htmlnvdThird Party Advisory
lists.opensuse.org/opensuse-updates/2016-07/msg00066.htmlnvdMailing ListThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-2590.htmlnvdThird Party Advisory
www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.htmlnvdThird Party Advisory
www.securityfocus.com/bid/84208nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1035196nvdThird Party AdvisoryVDB Entry
kb.isc.org/article/AA-01354nvdVendor Advisory
lists.debian.org/debian-lts-announce/2019/11/msg00023.htmlnvdThird Party Advisory
usn.ubuntu.com/3586-1/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.059
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000