CVE catalog
CVE-2016-2774
isc-dhcp: CVE-2016-2774
- Severity
- Medium · CVSS 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 73.62% · Oct 25, 2026
ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to cause a denial of service (INSIST assertion failure or request-processing outage) by establishing many sessions.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | isc-dhcp | trixie | 4.4.3-P1-8 | fixed |
| Debian | isc-dhcp | bookworm | 4.4.3-P1-2 | fixed |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu8 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu9 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu10 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu11 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12.1 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12.2 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12.3 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12.4 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12.5 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12.6 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12.7 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12.8 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12.9 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12.10 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12.12 | fixed |
| Ubuntu | isc-dhcp | 16.04 | 4.3.1-5ubuntu3 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.1-5ubuntu4 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.1-5ubuntu5 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu1 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu2 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu4 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu5 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu7 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu8 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu9 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu10 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu11 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu12 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu12.1 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu12.3 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu12.4 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu12.6 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu12.7 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu12.9 | fixed |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu8 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu9 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu10 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu11 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12.1 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12.2 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12.3 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12.4 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12.5 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12.6 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12.7 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12.8 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12.9 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12.10 | vulnerable |
| Ubuntu | isc-dhcp | 14.04 | 4.2.4-7ubuntu12.12 | fixed |
| Ubuntu | isc-dhcp | 16.04 | 4.3.1-5ubuntu3 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.1-5ubuntu4 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.1-5ubuntu5 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu1 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu2 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu4 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu5 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu7 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu8 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu9 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu10 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu11 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu12 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu12.1 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu12.3 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu12.4 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu12.6 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu12.7 | vulnerable |
| Ubuntu | isc-dhcp | 16.04 | 4.3.3-5ubuntu12.9 | fixed |
| Suse | dhcp | linux enterprise desktop 12 | 4.2.6-14.6.1 | fixed |
| Suse | dhcp | linux enterprise software development kit 12 | 4.2.6-14.6.1 | fixed |
| Suse | dhcp | linux enterprise server 12 | 4.2.6-14.6.1 | fixed |
| Suse | dhcp | linux enterprise server for sap applications 12 | 4.2.6-14.6.1 | fixed |
| Suse | dhcp | linux enterprise desktop 12 sp1 | 4.3.3-9.1 | fixed |
| Suse | dhcp | linux enterprise software development kit 12 sp1 | 4.3.3-9.1 | fixed |
| Suse | dhcp | linux enterprise server 12 sp1 | 4.3.3-9.1 | fixed |
| Suse | dhcp | linux enterprise server for sap applications 12 sp1 | 4.3.3-9.1 | fixed |
| Suse | dhcp | linux enterprise server 11 sp2-ltss | 4.2.4.P2-0.11.15.1 | fixed |
| Suse | dhcp | linux enterprise software development kit 11 sp4 | 4.2.4.P2-0.27.1 | fixed |
| Suse | dhcp | openstack cloud 5 | 4.2.4.P2-0.27.1 | fixed |
| Suse | dhcp | manager 2.1 | 4.2.4.P2-0.27.1 | fixed |
| Suse | dhcp | manager proxy 2.1 | 4.2.4.P2-0.27.1 | fixed |
| Suse | dhcp | linux enterprise point of sale 11 sp3 | 4.2.4.P2-0.27.1 | fixed |
| Suse | dhcp | linux enterprise server 11 sp3-ltss | 4.2.4.P2-0.27.1 | fixed |
| Suse | dhcp | linux enterprise server 11 sp3-teradata | 4.2.4.P2-0.27.1 | fixed |
| Suse | dhcp | linux enterprise server 11 sp4 | 4.2.4.P2-0.27.1 | fixed |
| Suse | dhcp | linux enterprise server for sap applications 11 sp4 | 4.2.4.P2-0.27.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | isc-dhcp | source | trixie | 4.3.4-1 | not yet assigned | Not reported | [817158] |
| Debian | isc-dhcp | source | bookworm | 4.3.4-1 | not yet assigned | Not reported | [817158] |
| Ubuntu | isc-dhcp | deb | 14.04 | 4.2.4-7ubuntu12.12 | Not reported | UBUNTU-CVE-2016-2774 | Not reported |
| Ubuntu | isc-dhcp | deb | 16.04 | 4.3.3-5ubuntu12.9 | Not reported | UBUNTU-CVE-2016-2774 | Not reported |
| Ubuntu | isc-dhcp | deb | 14.04 | 4.2.4-7ubuntu12.12 | Not reported | USN-3586-1 | Not reported |
| Ubuntu | isc-dhcp | deb | 16.04 | 4.3.3-5ubuntu12.9 | Not reported | USN-3586-1 | Not reported |
| Suse | dhcp | rpm | linux enterprise desktop 12 | 4.2.6-14.6.1 | Not reported | SUSE-SU-2016:1692-1 | Not reported |
| Suse | dhcp | rpm | linux enterprise software development kit 12 | 4.2.6-14.6.1 | Not reported | SUSE-SU-2016:1692-1 | Not reported |
| Suse | dhcp | rpm | linux enterprise server 12 | 4.2.6-14.6.1 | Not reported | SUSE-SU-2016:1692-1 | Not reported |
| Suse | dhcp | rpm | linux enterprise server for sap applications 12 | 4.2.6-14.6.1 | Not reported | SUSE-SU-2016:1692-1 | Not reported |
| Suse | dhcp | rpm | linux enterprise desktop 12 sp1 | 4.3.3-9.1 | Not reported | SUSE-SU-2016:1791-1 | Not reported |
| Suse | dhcp | rpm | linux enterprise software development kit 12 sp1 | 4.3.3-9.1 | Not reported | SUSE-SU-2016:1791-1 | Not reported |
| Suse | dhcp | rpm | linux enterprise server 12 sp1 | 4.3.3-9.1 | Not reported | SUSE-SU-2016:1791-1 | Not reported |
| Suse | dhcp | rpm | linux enterprise server for sap applications 12 sp1 | 4.3.3-9.1 | Not reported | SUSE-SU-2016:1791-1 | Not reported |
| Suse | dhcp | rpm | linux enterprise server 11 sp2-ltss | 4.2.4.P2-0.11.15.1 | Not reported | SUSE-SU-2016:1735-1 | Not reported |
| Suse | dhcp | rpm | linux enterprise software development kit 11 sp4 | 4.2.4.P2-0.27.1 | Not reported | SUSE-SU-2016:2024-1 | Not reported |
| Suse | dhcp | rpm | openstack cloud 5 | 4.2.4.P2-0.27.1 | Not reported | SUSE-SU-2016:2024-1 | Not reported |
| Suse | dhcp | rpm | manager 2.1 | 4.2.4.P2-0.27.1 | Not reported | SUSE-SU-2016:2024-1 | Not reported |
| Suse | dhcp | rpm | manager proxy 2.1 | 4.2.4.P2-0.27.1 | Not reported | SUSE-SU-2016:2024-1 | Not reported |
| Suse | dhcp | rpm | linux enterprise point of sale 11 sp3 | 4.2.4.P2-0.27.1 | Not reported | SUSE-SU-2016:2024-1 | Not reported |
| Suse | dhcp | rpm | linux enterprise server 11 sp3-ltss | 4.2.4.P2-0.27.1 | Not reported | SUSE-SU-2016:2024-1 | Not reported |
| Suse | dhcp | rpm | linux enterprise server 11 sp3-teradata | 4.2.4.P2-0.27.1 | Not reported | SUSE-SU-2016:2024-1 | Not reported |
| Suse | dhcp | rpm | linux enterprise server 11 sp4 | 4.2.4.P2-0.27.1 | Not reported | SUSE-SU-2016:2024-1 | Not reported |
| Suse | dhcp | rpm | linux enterprise server for sap applications 11 sp4 | 4.2.4.P2-0.27.1 | Not reported | SUSE-SU-2016:2024-1 | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [isc-dhcp-client]Fixed
Source package: [isc-dhcp]
Details (2)
4.4.3-P1-2· amd64 · bookwormFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · bookworm; dsa · isc-dhcp · debian · 12
4.4.3-P1-2· arm64 · bookwormFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · bookworm; dsa · isc-dhcp · debian · 12
- [isc-dhcp-client-ddns]Fixed
Source package: [isc-dhcp]
Details (2)
4.4.3-P1-2· amd64 · bookwormFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · bookworm; dsa · isc-dhcp · debian · 12
4.4.3-P1-2· arm64 · bookwormFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · bookworm; dsa · isc-dhcp · debian · 12
- [isc-dhcp-common]Fixed
Source package: [isc-dhcp]
Details (2)
4.4.3-P1-2· amd64 · bookwormFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · bookworm; dsa · isc-dhcp · debian · 12
4.4.3-P1-2· arm64 · bookwormFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · bookworm; dsa · isc-dhcp · debian · 12
- [isc-dhcp-dev]Fixed
Source package: [isc-dhcp]
Details (2)
4.4.3-P1-2· amd64 · bookwormFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · bookworm; dsa · isc-dhcp · debian · 12
4.4.3-P1-2· arm64 · bookwormFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · bookworm; dsa · isc-dhcp · debian · 12
- [isc-dhcp-relay]Fixed
Source package: [isc-dhcp]
Details (2)
4.4.3-P1-2· amd64 · bookwormFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · bookworm; dsa · isc-dhcp · debian · 12
4.4.3-P1-2· arm64 · bookwormFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · bookworm; dsa · isc-dhcp · debian · 12
- [isc-dhcp-server]Fixed
Source package: [isc-dhcp]
Details (2)
4.4.3-P1-2· amd64 · bookwormFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · bookworm; dsa · isc-dhcp · debian · 12
4.4.3-P1-2· arm64 · bookwormFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · bookworm; dsa · isc-dhcp · debian · 12
- [isc-dhcp-server-ldap]Fixed
Source package: [isc-dhcp]
Details (2)
4.4.3-P1-2· amd64 · bookwormFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · bookworm; dsa · isc-dhcp · debian · 12
4.4.3-P1-2· arm64 · bookwormFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · bookworm; dsa · isc-dhcp · debian · 12
[Debian 13 (Trixie)]
- [isc-dhcp-client]Fixed
Source package: [isc-dhcp]
Details (2)
4.4.3-P1-8· amd64 · trixieFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · 13
4.4.3-P1-8· arm64 · trixieFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · 13
- [isc-dhcp-client-ddns]Fixed
Source package: [isc-dhcp]
Details (2)
4.4.3-P1-8· amd64 · trixieFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · 13
4.4.3-P1-8· arm64 · trixieFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · 13
- [isc-dhcp-common]Fixed
Source package: [isc-dhcp]
Details (2)
4.4.3-P1-8· amd64 · trixieFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · 13
4.4.3-P1-8· arm64 · trixieFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · 13
- [isc-dhcp-dev]Fixed
Source package: [isc-dhcp]
Details (2)
4.4.3-P1-8· amd64 · trixieFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · 13
4.4.3-P1-8· arm64 · trixieFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · 13
- [isc-dhcp-keama]Fixed
Source package: [isc-dhcp]
Details (2)
4.4.3-P1-8· amd64 · trixieFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · 13
4.4.3-P1-8· arm64 · trixieFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · 13
- [isc-dhcp-relay]Fixed
Source package: [isc-dhcp]
Details (2)
4.4.3-P1-8· amd64 · trixieFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · 13
4.4.3-P1-8· arm64 · trixieFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · 13
- [isc-dhcp-server]Fixed
Source package: [isc-dhcp]
Details (2)
4.4.3-P1-8· amd64 · trixieFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · 13
4.4.3-P1-8· arm64 · trixieFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · 13
- [isc-dhcp-server-ldap]Fixed
Source package: [isc-dhcp]
Details (2)
4.4.3-P1-8· amd64 · trixieFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · 13
4.4.3-P1-8· arm64 · trixieFixed · Fixed:
4.3.4-1dsa · isc-dhcp · debian · 13
Observed:
References
- [https://access.redhat.com/errata/RHSA-2016:2590]
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2016_2590.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2016-2774]
- [https://osv.dev/vulnerability/DLA-2003-1]
- [https://osv.dev/vulnerability/SUSE-SU-2016:1692-1]
- [https://osv.dev/vulnerability/SUSE-SU-2016:1735-1]
- [https://osv.dev/vulnerability/SUSE-SU-2016:1791-1]
- [https://osv.dev/vulnerability/SUSE-SU-2016:2024-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2016-2774]
- [https://osv.dev/vulnerability/USN-3586-1]
- [https://security-tracker.debian.org/tracker/CVE-2016-2774]
[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]