dhcp (SUSE:Linux Enterprise Software Development Kit 11 SP4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Software Development Kit 11 SP4 package dhcp, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2017-3144 — CVSS 7.5 (high): A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket…
• CVE-2018-5732 — CVSS 7.5 (high): Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a…
• CVE-2018-5733 — CVSS 7.5 (high): A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eventually overflow a…
• CVE-2015-8605 — CVSS 6.5 (medium): ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application…
• CVE-2016-2774 — CVSS 5.9 (medium): ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows…