alpine · CVE-2022-2929

Quick triage

Priority: medium Published: Updated:

View at Official alpine advisory, NVD, CVE.org · CVE detail

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2022-2929: 1 source package rows (dhcp); 11 state rows across 5 repos (3.17-main, 3.18-main, 3.19-main, 3.20-main, edge-main); fixed 5, open 6.

Description:

In ISC DHCP 1.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1 a system with access to a DHCP server, sending DHCP packets crafted to include fqdn labels longer than 63 bytes, could eventually cause the server to run out of memory.

cvelogic Threat Intelligence