oss-sec mailing list archives

ISC DHCP vulnerability CVE-2016-2774 is now public


From: ISC Security Officer <security-officer () isc org>
Date: Tue, 8 Mar 2016 01:59:53 +0100

Please be advised that ISC announced a security advisory for a
vulnerability in the ISC DHCP servers.

CVE-2016-2774 is a denial-of-service vector which can be exploited
against running ISC DHCP servers by opening (and never closing) a large
number of TCP connections to the ports the server is using for
inter-process communication.

https://kb.isc.org/article/AA-01354

Kind Regards,
Marcin Siodelski
ISC Security Officer


Current thread: