Detections
Analytics
Alpine: dhcp: security update to 4.4.1-r0
high Tenable Self-Hosted Container Security Plugin ID 425620
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or
an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by
sending a response containing a specially constructed options section. Affects ISC DHCP versions 4.1.0 ->
4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0 (CVE-2018-5732)
- A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP
server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC
DHCP 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0. (CVE-2018-5733)
- There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when
operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its
documentation, but the bug in the library function prevented this from causing any harm. All releases of
dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested
prior to release and are known to not present issues like this. Some third-party packagers of ISC software
have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential.
Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or
even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to
version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes
backported to them. ISC does not have access to comprehensive version lists for all repackagings of dhcpd
that are vulnerable. In particular, builds from other vendors may also be affected. Operators are advised
to consult their vendor documentation. (CVE-2019-6470)
See Also
https://security.alpinelinux.org/vuln/CVE-2018-5732
Plugin Details
Severity: High
ID: 425620
Version: Revision 1.4
Type: Local
Published: 4/15/2025
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 5.7
Percentile: 97
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS Score Source: CVE-2019-6470
CVSS v3
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Vulnerability Publication Date: 2/28/2018
Reference Information
CVE: CVE-2018-5732, CVE-2018-5733, CVE-2019-6470
IAVB: 2018-B-0034-S, 2020-B-0036-S