CVE-2022-2928: An option refcount overflow exists in dhcpd
In ISC DHCP 4.4.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1, when the function optioncodehashlookup() is called from addoption(), it increases the option's refcount field. However, there is not a corresponding call to optiondereference() to decrement the refcount field. The function addoption() is only used in server responses to lease query packets. Each lease query response calls this function for several options, so eventually, the reference counters could overflow and cause the server to abort.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2022-2928?
The severity of CVE-2022-2928 is medium.
What is the affected software of CVE-2022-2928?
The affected software of CVE-2022-2928 is ISC DHCP versions 4.4.0 to 4.4.3 and 4.1-ESV-R1 to 4.1-ESV-R16-P1.
How does CVE-2022-2928 impact ISC DHCP?
CVE-2022-2928 increases the option's refcount field, but does not decrement it, leading to a vulnerability.
How can I fix CVE-2022-2928?
To fix CVE-2022-2928, upgrade to a version of ISC DHCP that is not affected.
Where can I find more information about CVE-2022-2928?
More information about CVE-2022-2928 can be found in the references provided.